You will need Adaware SE and HijackThis which you can download at
www.majorgeeks.com
Then:
Check your add and remove program for these entries if there remove them:
Elite Bar, Search Miracle, SearchMiracle, EliteBar, EM Toolbar, Enternet
Media Toolbar, EliteBar Internet Explorer Toolbar
----------------------------------------------------------------------
Adaware SE Personal Edition (this is a freeware version)
http://majorgeeks.com/download.php?det=506
1st Install, run it and Update it.
Then put the this Configuration settings before scanning.
Click on the configuration Windows button.
Click on Scanning, and choose the following settings to:
-"Scan within archives"
-"Scan active processes,
-"Scan registry"
-"Deepscan registry"
-"scan my IE Favourites for banned URL's"
-"scan my host's file"
Then click on Tweaks, go to "Cleaning engine" and set it to:
-"Automatically try to unregister objects prior to deletion"
-"Let Windows remove files in use after reboot."
Click on "Proceed" to save these Preferences.
Click on the "Scan Now" button.
Remove everything it finds.
-----------------------------------------------------------------------
Next
Turn Off System Restore (see links below for how to)
Windows XP
http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam
Windows Me
http://service1.symantec.com/SUPPOR...2001012513122239?OpenDocument&src=sec_doc_nam
Reboot your computer to safemode (see link below for how to)
How To Boot Into SafeMode!!!
WINDOWS 95
WINDOWS 98/ME
WINDOWS 2000
Windows XP
WINDOWS as part of a multi boot system
http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam
Disable hidden Files & Folders (see link below for how to)
How To Show Hidden Files And Folders!!!
http://service1.symantec.com/SUPPOR...Virus Corporate Edition&ver=8.x&osv=&osv_lvl=
1. Open Hijackthis and Rescan Your Computer
2. Place a Check Beside Each Item Listed Below
3. DO NOT CLICK FIX YET
--------------------------------------------------------------------
4. While in SAFE MODE
Locate and delete if found:
C:\windows\system32\kalvmxf32.exe
--------------------------------------------------------------------
5. Close all Browser Windows (Including This One) and Click The Fix Checked
Button on Hijackthis
----------------------------------------------------------------------
Here are the items To Check for Removal.
---------------------------------------------------------------------
O4 - HKLM\..\Run: [kalvsys] C:\windows\system32\kalvmxf32.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no
file)
---------------------------------------------------------------------
Delete files/folder from the following directories (But not the directory
itself, for example delete all files/folder IN temp.
C:\Windows\Temp\
C:\Documents and Settings\<Your Profile>\Local Settings\Temp\
C:\Documents and Settings\<All other users Profile>\Local Settings\Temp\
C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet
Files\ <<<This will delete your files in your internet cache--including
cookies.
C:\Documents and Settings\<All other users Profile>\Local Settings\Temporary
Internet Files\
Empty your "Recycle Bin"
And that should do it. Whew! Now I'm tired.
