Print out these instructions or save them with notepad or Word
Download Mozilla Firefox to your internetbrowser! It's safer and faster than Internet Explorer.
Please download AVG Anti-Spyware to your desktop. When ready, do following:
Please do the following:
* Start AVG Anti-Spyware
* Click the Update icon
* Click Start update
* Wait until updates are downloaded
* Click the Scanner icon
* Open the Settings tab
o Make sure that under 'How to act?' read Quarantine (If not, click the text and choose Quarantine)
o Under 'How to scan?' all checkboxes should be ticked
o
Under 'Reports' select Automatically generate report after every scan and uncheck Only if threats were found
o Under 'What to scan?' select Scan every file
*Click the Shield icon
* Under the 'Resident shield is' click active to make it inactive
* Close AVG Anti-Spyware
=========================================
Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.
This program is for XP and Windows 2000 only!
Double-click ATF Cleaner.exe to open it.
Under Main select the following:
* Windows Temp
* Current User Temp
* All Users Temp
* Temporary Internet Files
* Prefetch
* Java Cache
*The other boxes are optional*
Then click the Empty Selected button.
If you use Firefox:
* Click Firefox at the top and choose: Select All
* Click the Empty Selected button.
* NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
If you use
Opera:
* Click
Opera at the top and choose:
Select All
* Click the
Empty Selected button.
*
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
Click
Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
=========================================
Reboot to
safemode
* If the computer is running, shut down Windows, and then turn off the power
* Wait 30 seconds, and then turn the computer on
* Start tapping the F8 key
* The Windows Advanced Options Menu appears
* Ensure that the Safe Mode option is selected
* Press Enter. The computer then begins to start in Safe mode
* Login on your usual account
=========================================
* Close all open windows / programs / folders
* Start
AVG Anti-Spyware
* Click the
Scanner icon
* Click
Complete System Scan
*
Let the program scan the machine
* When the scan has finished, follow the instructions below
o Make sure that under
'Set all elements to' read
Quarantine (If not, click the text and choose Quarantine)
o Click
Apply all actions
o Click
Save Report
o Click
Save reports as
o Save report to your Desktop
Restart your computer back to normalmode.
Open
HijackThis, scan, check these lines:
O15 - Trusted Zone: *.adgate.info
O15 - Trusted Zone: *.adsextend.net
O15 - Trusted Zone: *.dollarrevenue.com
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.matcash.com
O15 - Trusted Zone: *.media-motor.com
O15 - Trusted Zone: *.mediatickets.net
O15 - Trusted Zone: *.snipernet.biz
O15 - Trusted Zone: *.systemdoctor.com
O15 - Trusted Zone: *.winantivirus.com
O15 - Trusted Zone: *.adgate.info (HKLM)
O15 - Trusted Zone: *.adsextend.net (HKLM)
O15 - Trusted Zone: *.dollarrevenue.com (HKLM)
O15 - Trusted Zone: *.elitemediagroup.net (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.matcash.com (HKLM)
O15 - Trusted Zone: *.media-motor.com (HKLM)
O15 - Trusted Zone: *.mediatickets.net (HKLM)
O15 - Trusted Zone: *.snipernet.biz (HKLM)
O15 - Trusted Zone: *.systemdoctor.com (HKLM)
O15 - Trusted Zone: *.winantivirus.com (HKLM)
O16 - DPF: {5526B4C6-63D6-41A1-9783-0FABF529859A} - http://cabs.elitemediagroup.net/cabs/eliteview.cab
And press
Fix Checked
Post fresh
HijackThis log and the
AVG Anti-Spyware report.
