IMPORTANT: Please read these instructions carefully before you submit your message: Use this page to add a message to an existing thread. Type a brief but descriptive subject, and then compose your full message below. Hint: if you write thoughtfully, carefully, and politely, you will receive more helpful responses. Messages relating to software piracy are not permitted, so please do not request or provide CD keys, serial numbers, or registration codes here. Advertising is not permitted. Inappropriate messages will be promptly removed. Finally, please do not post the same message more than once. Sign in to see your previous messages. Thank you for visiting Annoyances.org!

Your Name (leave blank if you already have an account)
Your E-mail Address privacy tips
Choose a Password why?
Tip: If you've forgotten your password, just leave it blank, and it will be emailed to you.
PLEASE double-check your email address for any mistakes or typos.

Operating system:	Windows XP
Subject: (please be descriptive)
Type your message here: (important: place your response at the beginning of the message)
On Saturday, October 30, 2004 at 10:53 pm, Yap wrote: ><font face="Comic Sans MS" color="#0060FF"> ><p> >Soon or later this crap will destroy your system... ><p>Let me repeat it all to make sure you are not miss some procedure :</p> ><hr> ><p>First turn off System Restore , empty Temp , Temporary Internet Files and >Recycle bin folders</p> ><hr> ><p>Second Run hijackthis -> scan -> and give a check mark in front of every >items below -> click "fix checked"<br> ><font color="#FF0000">O4 - HKLM\..\Run: [Automatic Microsoft Windows Updater] SUCHOST.EXE<br> >O4 - HKLM\..\RunServices: [Microsoft Updater Resources] Win32Fixer.exe<br> >O4 - HKLM\..\RunServices: [Automatic Microsoft Windows Updater] SUCHOST.EXE<br> >O4 - HKLM\..\RunServices: [Windows System Manager] winsystem.exe<br> >O4 - Startup: PowerReg Scheduler V3.exe<br> >O4 - Startup: PowerReg SchedulerV2.exe<br> ></font><font color="#008000">O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) >- >http://www.drivershq.com/DD_v4.CAB<br> >O16 - DPF: {072D3F2E-5FB6-11D3-B461-00C04FA35A21} (CFForm Runtime) - ><a href="https://www.birdville.k12.tx.us/CFIDE/classes/CFJava.cab"> ><font color="#008000">https://www.birdville.k12.tx.us/CFIDE/classes/CFJava.cab</font></a></font></p> ><hr> ><p>Third search in C:\ for every files above (suchost.exe ; win32fixer.exe ; >winsystem.exe; powerreg scheduler v3.exe ;  powerreg schedulerv2.exe ; >dd_v4.cab ; cfjava.cab) and delete them all</p> ><hr> ><p>Fourth follow every removal instruction for files and registry key from below >site<br> ><a href="http://securityresponse.symantec.com/avcenter/venc/data/trojan.treb.htmlhttp:/securityresponse.symantec.com/avcenter/venc/data/trojan.treb.html"> >http://securityresponse.symantec.com/avcenter/venc/data/trojan.treb.html</a><br> ><a href="http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.EU"> >http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RBOT.EU</a><br> ><a href="http://www.pestpatrol.com/PestInfo/b/blaire.asp"> >http://www.pestpatrol.com/PestInfo/b/blaire.asp</a><br> ><a href="http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?id=65604&VName=TROJ_BANCOS.CR&VSect=O"> >http://nl.trendmicro-europe.com/enterprise/security_info/ve_detail.php?id=65604&VName=TROJ_BANCOS.CR&VSect=O</a><br> ><a href="http://www.pestpatrol.com/pestinfo/p/powerreg_scheduler.asp"> >http://www.pestpatrol.com/pestinfo/p/powerreg_scheduler.asp</a></p> ><p>Then restart computer.</p> ><hr> ><p>Fifth follow every step below instruction from the first to the end, do not >forget to get the very last version of below software... click the link will >bring you to download the latest software</p> ><font face="Tahoma" color="black"><p><b><font size="3">Common Steps of Virus - Trojan >- Spyware - Mallware - Adware >Removal</font></b></p> ><p>1. Turn off system restore, empty Temp and Temporary Internet Files folders, >also Recycle Bin...<br> >2. Run online virus scan at <a href="http://housecall.trendmicro.com/housecall/start_corp.asp">Trendmicro</a> >or > <a href="http://www.pandasoftware.com/activescan/">Panda</a> site<br> >3. Update your virus definition and scan the system...<br> >    ◊ Download, install and update ><a href="http://free.grisoft.com/freeweb.php/doc/2/">AVG</a> or ><a href="http://www.free-av.com/">AntiVir</a> in case you don't have anti virus >software<br> >    ◊ Download last version of ><a href="http://vil.nai.com/vil/stinger/">Stinger</a> stand alone virus scanner<br> >4. Download, install and update and run the fixer of ><a href="http://cwshredder.net/bin/CWSInstall.exe">CWShredder</a> and ><a href="http://www.safer-networking.org/files/delcwssk.zip"> >CoolWWWSearch.SmartKiller removal</a><br> >5. Download install and update ><a href="http://www.safer-networking.org/en/mirrors/index.html">Spybot</a>, ><a href="http://www.lavasoftusa.com/support/download/">Ad-aware</a>, and ><a href="http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml">VX2cleaner</a> >plug-in for ad-aware<br> >6. Run full system scan in ><a href="http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/WINDOWSXP/home/using/productdoc/en/boot_failsafe.asp">safe >mode</a> with Stinger, Spybot and Ad-aware (run the VX2cleaner scan >first)<br> >7. Download install and update ><a href="http://www.javacoolsoftware.com/sbdownload.html">Spywareblaster</a>, one >of firewall ><a href="http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp"> >Zonealarm</a> / <a href="http://www.kerio.com/kpf_download.html">Kerio</a> and ><a href="http://grc.com/files/DCOMbob.exe">DCOMbobulator</a> for extra >protection<br> >8. If the problem persist download ><a href="http://209.133.47.12/~merijn/files/HijackThis.exe">HijackThis</a> and >send the report log back to this forum<br> >9. Turn on system restore</p> ><p>Note:<br> >All above software are free for personal use<br> >When email address needed for registration some site not explicitly but deny >hotmail account probably occur to all free base email addresses</p></font> ><p>It is also necessary to run cwshredder v.2.0 and coolwwwsearch.smartkiller >removal tool in safe mode</p> > ><p></font> ><hr color="#08afa8" size="3"> ><p align="center"> ><img src="http://img.photobucket.com/albums/v425/xuen/DragonHeart.png"> ></p>

Options:

Please email me a carbon-copy of my message.
Please email me when anyone directly responds to my message.
Please email me when anyone replies to any message in this thread.

Check this box to preserve your spacing, or leave it unchecked to have your text wrapped automatically. Tip: Don't use this option unless you really need it; use the preview feature on the next page if you're not sure.

Throw away your message and return to the forum

Preview your message and submit it on the next page