Forum Home
Press F1
 
Thread ID: 57316 2005-04-29 11:00:00 Help ... I've been "Nail"ed ... HelzBayne-Omalley (7992) Press F1
Post ID Timestamp Content User
350258 2005-04-29 13:03:00 What OS are you running would be helpfull, WinXP and ME will probably require that the retsore feature is turned of to stop getting alerts.

im running win XP pro .. alerts .. you mean those yellow shields that keep saying their updating? :@@:
HelzBayne-Omalley (7992)
350259 2005-04-29 13:06:00 Try that file from the Symantec site. See if it detects and removes it.

sorry man .. no luck .. didnt even notice them :@@:
HelzBayne-Omalley (7992)
350260 2005-04-29 13:10:00 no i havent actually .. i said i was a novice after all lol but thanx for the idea ;)
I suppose you know how to boot your computer into safe mode?

Cheers :)
Renmoo (66)
350261 2005-04-29 13:20:00 im running win XP pro .. alerts .. you mean those yellow shields that keep saying their updating? :@@:

No, but you should downlaod the windows updates. I mean that if one of your security come anti-malware app's detects and cleans a nasty you can still get alerts for it's presence from the app picked up in the restore files. Only bother about it if it happens.

As has been said, update all your anti-virus, anti-spyware and firewall app's, boot in to safe mode (without network support), have a good cleanout of temp, cache, internet, files etc, run all your updated anti-malware app's and reboot. Might be handy to downlaod something like a2 anti-trojan, anti-worm (www.emsisoft.com) to give it a run as well. I only use it to scan occasionally, not activated all the time. Your Spybot S&E version should be 1.4, if you don't have that version, download it, then uninstall the old one before installing and running the new one in Advanced Mode.
Murray P (44)
350262 2005-04-29 13:21:00 Try this

Nail.exe is a part of the new generation of VX2 adware components.
Nail.exe is protected from deletion by Delprot driver.
Delprot.sys is the driver used to protect adware registry keys from deletion.

Also related files:
%WinDir%\isrvs\ffisearch.exe
%WinDir%\isrvs\desktop.exe
%SysDir%\Drivers\delprot.sys

Removal:
Go to the Safe mode.
Delete the key
HKLM\SYSTEM\CurrentControlSet\Services\Delprot
Remove ffisearch.exe and desktop.exe from Windows startup registry keys

Delete Files:
%WinDir%\isrvs\ffisearch.exe
%WinDir%\isrvs\desktop.exe
%SysDir%\Drivers\delprot.sys

Kill the process %WinDir%\Nail.exe and remove %WinDir%\Nail.exe from Windows system

Or try this dl.filekicker.com

From here www.simplysup.com
Speedy Gonzales (78)
350263 2005-04-29 13:36:00 I suppose you know how to boot your computer into safe mode?

Cheers :)

yeah i do .. thankfully lol
HelzBayne-Omalley (7992)
350264 2005-04-29 13:41:00 No, but you should downlaod the windows updates. I mean that if one of your security come anti-malware app's detects and cleans a nasty you can still get alerts for it's presence from the app picked up in the restore files. Only bother about it if it happens.

As has been said, update all your anti-virus, anti-spyware and firewall app's, boot in to safe mode (without network support), have a good cleanout of temp, cache, internet, files etc, run all your updated anti-malware app's and reboot. Might be handy to downlaod something like a2 anti-trojan, anti-worm (www.emsisoft.com) to give it a run as well. I only use it to scan occasionally, not activated all the time. Your Spybot S&E version should be 1.4, if you don't have that version, download it, then uninstall the old one before installing and running the new one in Advanced Mode.

um .. windows XP has an automatic update function .. and its been running since i first got online .. it downloads and updates al lthe security stuff almost weekly .. iv been moaning bout it to myself so i know bout them lol
HelzBayne-Omalley (7992)
1 2