her er en guide:
Run HijackThis
Click config, click misc tools, click open prozess manager. Search for every instance of C:\WINDOWS\INET10047\SERVICES.EXE and click Kil prozess for each you find.
Click back, click on scan and put a check on the following lines, if they are still there
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page =
http://www.search-daily.com/ (...)F1 - win.ini: run=C:\WINDOWS\INET10047\SERVICES.EXE
O2 - BHO: (no name) -
{5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [xp_system]
C:\WINDOWS\INET10047\SERVICES.EXE
O4 - HKCU\..\Run: [xp_system]
C:\WINDOWS\INET10047\SERVICES.EXE
Make sure all browser and all Windows Explorer windows are closed and click on fix.
Reboot
Maybe you need to unhide hidden files and folders.
Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Uncheck the box next to "Hide file extensions for known file types"
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
Then open an Explorer window and delete these Files and Folders:(if still there)
C:\WINDOWS\INET10047\SERVICES.EXE
Reboot and Download
http://www.ccleaner.com/ (...), install and run it to delete any files from "temp", "tmp" folders (DON`T USE THE ISSUSES TAB). Just start Ccleaner and click: Run Cleaner. This cleaning should be done on a regular basis.
Post a fresh HijackThis log to check.
Please tell me if something is going wrong or didn´t work out. Also please tell me if the removals tools find anything.
-------------------------
rkerr
Feb 16 2005, 10:48 AM
smile.gif Thanks Gnmpf--
Sorry it took so long to get back to this.
Followed your instrctions to a T--think they worked perfectly.
