Page 2 - StartPage.6.BF & StartPage.6.BQ

You may want to print these instructions

Logoff your internet connection. Please press Ctrl-Alt-Delete and open Task Manager. End the following process by selecting it and pressing the End Process button and clicking Yes to the confirmation message:

INT339890.EXE

Run HijackThis, close all browsers and any other windows, place a checkmark next to the following items. Click "fix checked".


O4 - HKLM\..\Run: [websx] C:\PROGRAM FILES\WEBSX\INT339890.EXE -auto

Boot into Safe Mode. Reboot your computer, start tapping F8 when it first starts booting, select Safe Mode.

Show hidden files:
How to Show hidden files and folders.
http://www.xtra.co.nz/help/0,,4155-1916458,00.html

Delete the following folder:

C:\PROGRAM FILES\WEBSX\

Reboot normally and post a fresh log.

Tom

Chaffers,

You are certainly way ahead of me in computer understanding. I was a graphic artist (newspapers, books, posters, etc.), so I've worked with computers since mid-80s, but my experience was almost all with Macs. Sigh.

Although I have not had the performance problems with IE that you describe, I too have acquired this ineradicable virus. I've also run AVG, adaware, and Spybot S&D. AVG always finds it, asks if I want to put it in the Virus Vault, and then tells me it can't be removed.

I am running ME on a low-end Dell. I have no idea how this compares to 98 Gold.

I did a search "files containing text" and came up with a file called "USER.DAT" in C\WINDOWS. It is 1,385KB, Read only, hidden. (AVG told me the virus was in C:\_RESTORE\TEMP\A0166728.CPY, which no search could find.) I suspect the USER.DAT file has something to do with the system restore function in ME.

As I said, I'm sure you are light-seconds ahead of me in computing. Just thought I'd throw in my two cents worth, hoping it might give you a lead. Pardon me if I wasted your time.

Feddy, or you can call me Chris