I have done the"Read and Run Please Advise

Discussion in 'Malware Help (A Specialist Will Reply)' started by mrpugowski, Nov 30, 2006.

  1. mrpugowski

    mrpugowski Private E-2

    Hi, I have done the read & run as you outlined, however I was unable to run online scans in safe mode and had trouble running bdscan it stalled 3 or four times. I have attached logs for all as requested. Thanks for your help, I am looking forward to your reply.
    Thanks Mr p
     

    Attached Files:

    mrpugowski, Nov 30, 2006
    #1
  2. mrpugowski

    mrpugowski Private E-2

    Hi more logs
    Thanks Mrp
     

    Attached Files:

    mrpugowski, Nov 30, 2006
    #2
  3. mrpugowski

    mrpugowski Private E-2

    and the HJT log
    Thanks again
     

    Attached Files:

    mrpugowski, Nov 30, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Both your Spybot log and your AVG Antispyware log show that you did not fix what they found. There is no sense in running the tools unless you have them fix what they find. Re-run the scans and make sure you FIX not ignore. Then attach new logs from those two scans.

    Did you setup the below security policies yourself?
    Uninstall the below old versions of software:
    J2SE Runtime Environment 5.0 Update 2

    Now install the current version of Sun Java from: Sun Java Runtime Environment

    Delete the below items in your email folders! You will have to run your email program to find them.
    Local Folders\Deleted Items\Order Confirmation number: 37679041\37679041.pdf.zip[37679041.pdf.exe]
    Local Folders\Inbox\TT_2846583-[YOUR DETAILS HAVE BEEN CHANGED!]\TT_2846583.zip[TT_2846583.exe]
    Local Folders\Inbox\TT_2846583-[YOUR DETAILS HAVE BEEN CHANGED!]\TT_2846583.zip[TT_2846583.exe]


    Continue by downloading a tools we will need - Pocket KillBox

    Save it to its own folder somewhere that you will be able to locate it later.

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/272862d3fc14ff549405/netzip/RdxIE601.cab
    O18 - Protocol: bw+0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: offline-8876480 - {593EA108-913A-44AC-8323-14A0FA5379E6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

    After clicking Fix, exit HJT.

    Now run Pocket Killbox by doubleclicking on killbox.exe
    Choose Tools > Delete Temp Files and click Delete Selected Temp Files.
    Then after it deletes the files click the Exit (Save Settings) button.
    NOTE: Pocket Killbox will only list the added files it is able to find on the system. So when you do the below, if some files do not show in the list after pasting them in, just continue.

    Select:
    • Delete on Reboot
    • then Click on the All Files button.
    • Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

    C:\Documents and Settings\ANDREW\Local Settings\Temp\MediaGateway.exe
    C:\Documents and Settings\ANDREW\Local Settings\Temp\saveinstwm.exe
    C:\WINDOWS\Downloaded Program Files\RdxIE.dll
    c:\windows\country.exe
    c:\windows\tool1.exe
    c:\windows\tool2.exe
    C:\Windows\tool3.exe
    C:\Windows\tool4.exe
    C:\Windows\toolbar.exe
    • Return to Killbox, go to the File menu, and choose Paste from Clipboard.
    • Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt.
    If you receive a PendingFileRenameOperations prompt, just click OK to continue (But please let me know if you receive this message!).

    If Killbox does not reboot just reboot your PC yourself.

    After reboot locate the below folders and delete if found:
    c:\windows\uniq
    C:\Documents and Settings\ANDREW\Start Menu\Programs\WhenU

    Also delete all files and subfolders in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
    C:\Documents and Settings\ANDREW\Local Settings\Temp

    Now attach the below new logs and tell me how the above steps went.

    1. GetRunKey
    2. ShowNew
    3. HJT
    Make sure you tell me how things are working now!

    Reminder Note: Once we have determined you are malware free you will need to disable System Restore, reboot, and re-enable system restore per step 1 of the READ & RUN ME. This only applies to if using WinXP or WinMe.
     
    Last edited: Dec 1, 2006
    chaslang, Dec 1, 2006
    #4
  5. mrpugowski

    mrpugowski Private E-2

    Hi thanks for your quick response, dont know how you guys do it!

    I now have run the scans again and done the fixes, there seems to be something that cannot be fixed by spybot I have attached logs.

    I dont remember setting up the security polocies you have posted.

    Sun java runtime installed.

    Emails Deleted

    I ran & Fixed HJT hoever I forgot to close browser window sorry

    I ran killbox and deleted files

    I received PendingFileRenameOperations prompt

    I rebooted myself

    Deleted c:\windows\uniq Could not find C:\Documents and Settings\ANDREW\Start Menu\Programs\WhenU

    I could not Delete anything in this file
    C:\Documents and Settings\ANDREW\Local Settings\Temp
     

    Attached Files:

    mrpugowski, Dec 1, 2006
    #5
  6. mrpugowski

    mrpugowski Private E-2

    Spybot(I have attached the spybot log i got after rebooting) & AVG Logs
     

    Attached Files:

    mrpugowski, Dec 1, 2006
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Based on your logs you did not use Pocket Killbox as requested. Please follow the directions in my last fix again and make sure you use Killbox to delete these files:
    They are still present which means they were not deleted. If Killbox is not able to delete them (check for yourself), then boot into safe mode and delete them yourself manually.

    Attach new logs from ShowNew and HJT afterwards.
     
    chaslang, Dec 1, 2006
    #7
  8. mrpugowski

    mrpugowski Private E-2

    Hi,thanks again i deleted manually in safe mode here are the 2 logs.
     

    Attached Files:

    mrpugowski, Dec 2, 2006
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Uninstall the below old versions of software:
    J2SE Runtime Environment 5.0 Update 2


    If you are not having any other malware problems, it is time to do our final steps:
    1. If we used Pocket Killbox during your cleanup, do the below
      • Run Pocket Killbox and select File, Cleanup, Delete All Backups
    2. If we used ComboFix you can delete the ComboFix.exe file and associated C:\combofix.txt log that was created.
    3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
    4. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
    5. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
    6. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    7. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
    8. If you are running Windows XP or Windows ME, do the below:
      • go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     
    chaslang, Dec 2, 2006
    #9

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds