There's afew nasties there to deal with Aurora,IST and
probably trojan dinst/Intexp
Check your add/remove screen and remove istbar or istsvc
if found also sidefind
Download these:
First, download Ewido Security Suite.
-------------------------------------
http://www.ewido.net/en/download/
please install and run Ewido.
When installing, under "Additional Options"
uncheck "Install background guard" and "Install scan via
context menu".
From the main ewido screen, click on update in the left
menu, then click the Start update button.
After the update finishes (the status bar at the bottom
will display "Update successful")
Do Not run ewido yet Exit and download Adaware and the
VX2 cleaner:
Download Lavasoft's Ad-Aware
-----------------------------
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-
8022_4-10045910.html
Then close Ad-aware SE and download the new VX2 Cleaner
New VX2 Cleaner
http://updates.ls-servers.com/vx2cleaner.zip
Save the file where you can find it easily then Extract
the files and copy them (Left click and cover the files
and then right click and copy) then open Lavasoft's Ad-
Aware "Plugins" folder and paste them into there(Right
click and paste).
(C:\Program Files\Lavasoft\Ad-Aware SE\Plugins)
Download Hoster :
-----------------
http://andymanchesta.com/Downloads2/hoster.zip
Copy this to notepad so it can be viewed in safe mode
Run Ad-Aware and click the Add-ons button in the main
window.Select VX2 Cleaner from the list.
Click the "Run Tool" button in the lower right corner of
the window.Click "OK" when asked if you want to execute
this tool.It will say VX2 variant found then press
clean.Next it will say to reboot and run a smart scan
with Adaware.
Reboot into safe mode (Reboot and keep tapping F8 then
choose safe mode from the list)
Run a full system scan with Adaware SE
Run Ewido
Click on the Scanner button in the left menu, then click
on Complete System Scan. This scan can take quite a while
to run. If ewido finds anything, it will pop up a
notification. click remove for each
When its finished Run Hoster :
Press 'Restore Original Hosts' and press 'OK'
Clear temp and prefetch files
Goto start and run and type
%temp%
Delete the contents of this folder
Goto start and run and type
prefetch
Delete the contents of this folder
Then goto start menu and control panel and then to
Internet Options
Goto the Programs Tab and press reset web settings and
include the home page then press ok
Then back to the general tab and enter the homepage you
wish to use into the space provided and press apply
Then reboot back to normal mode and that should then be
fixed
Let us know if you have any problems
Regards Andy
