| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 99620 | 2009-05-08 20:33:00 | Popups and slow computer - please help! | Gruffa (14894) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 772370 | 2009-05-09 00:34:00 | Some entries are still in startup. Keep system restore disabled, tick these then tick fix checked. Then boot into safe mode, find the files in bold (if they exist and delete them). Close browsers O4 - HKLM\..\Run: [082acabf] rundll32.exe "C:\WINDOWS\system32\wawunego.dll",b O4 - HKLM\..\Run: [CPM0b19f923] Rundll32.exe "c:\windows\system32\refurepo.dll",a O4 - HKLM\..\Run: [keniduluso] Rundll32.exe "C:\WINDOWS\system32\sufokiyu.dll",s O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\RunOnce: [SpybotDeletingB8735] command.com /c del "C:\Documents and Settings\Gustav\Application Data\Twain\Twain.exe" O4 - HKCU\..\RunOnce: [SpybotDeletingD9673] cmd.exe /c del "C:\WINDOWS\system32\sufokiyu.dll_old" O4 - HKCU\..\RunOnce: [SpybotDeletingD6684] cmd.exe /c del "C:\WINDOWS\system32\refurepo.dll_old" O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\nitekufi.dll (file missing) O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\nitekufi.dll (file missing) |
Speedy Gonzales (78) | ||
| 772371 | 2009-05-09 04:22:00 | Well this has lead to another problem. I downloaded Spybot. I scanned and deleted. Now it keeps popping up ALL THE TIME, warning me about some change in the system32 folder in the Windows folder! How do I get rid of this? Thanks. That is teatimer. Once you tick: O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program\Spybot - Search & Destroy\TeaTimer.exe It should be gone. And if it keeps popping up that there is changes, its probably the virus trying to wreak havoc in your computer [quote=Gruffa;780759]Malwarebytes is now up and running! Update and perform a full scan. Blam |
Blam (54) | ||
| 772372 | 2009-05-09 07:47:00 | Disable Teatimer by changing Spybot to Advanced mode. Then select Settings. Select Resident. Untick Teatimer. NOD32 wants a username and password because it is not free and was either in trial mode or has expired and you need to renew. You can do this yourself online, go to NOD32.co.nz. |
pctek (84) | ||
| 1 2 | |||||