Important: Make sure that you are not connected to the internet while you are in Safe Mode. You will need to print these instructions.
Boot to Safe Mode. To do this:
- Restart your computer.
- Continually tap the F8 button as your computer is booting a menu appears.
- Use up-arrow key to select Safe Mode and press Enter.
We need to make sure that none of the following processes are running. To check, you need to press the Ctrl+Alt+Del keys to open Task Manager. Click on the Processes tab and then click on Image Name (this will put the processes in order). If any of the following are running, right-click on them and select End process.
hkcmd.exe
igfxpers.exe
igfxtray.exe
mcagent.exe
mcdetect.exe
mcmnhdlr.exe
mcregwiz.exe
mcshield.exe
mctskshd.exe
mcupdate.exe
mcvsshld.exe
mmtask.exe
MotiveSB.exe
MpfService.exe
MpfTray.exe
mscifapp.exe
oasclnt.exe
qttask.exe
tfswctrl.exe
VerizonSupport.exe
-------------------------------------------------------------------
Please open Notepad and copy/paste all of the text in the quote box into it:
@echo off
if exist "C:\Program Files\Analog Devices\Core\smax4pnp.exe" copy "C:\Program Files\Analog Devices\Core\bak\smax4pnp.exe" "C:\Program Files\Analog Devices\Core"
if exist "C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" copy "C:\Program Files\Common Files\Microsoft Shared\Works Shared\bak\WkUFind.exe" "C:\Program Files\Common Files\Microsoft Shared\Works Shared"
if exist "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" copy "C:\Program Files\Common Files\Sonic\Update Manager\bak\sgtray.exe" "C:\Program Files\Common Files\Sonic\Update Manager"
if exist "C:\Program Files\Dell Support\DSAgnt.exe" copy "C:\Program Files\Dell Support\bak\DSAgnt.exe" "C:\Program Files\Dell Support"
if exist "C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" copy "C:\Program Files\Intel\Modem Event Monitor\bak\IntelMEM.exe" "C:\Program Files\Intel\Modem Event Monitor"
if exist "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" copy "C:\Program Files\Java\jre1.5.0_09\bin\bak\jusched.exe" "C:\Program Files\Java\jre1.5.0_09\bin"
if exist "C:\Program Files\McAfee.com\Agent\mcagent.exe" copy "C:\Program Files\McAfee.com\Agent\bak\mcagent.exe" "C:\Program Files\McAfee.com\Agent"
if exist "C:\Program Files\McAfee.com\Agent\mcregwiz.exe" copy "C:\Program Files\McAfee.com\Agent\bak\mcregwiz.exe" "C:\Program Files\McAfee.com\Agent"
if exist "C:\Program Files\McAfee.com\Agent\mcupdate.exe" copy "C:\Program Files\McAfee.com\Agent\bak\mcupdate.exe" "C:\Program Files\McAfee.com\Agent"
if exist "C:\Program Files\McAfee.com\MPS\mscifapp.exe" copy "C:\Program Files\McAfee.com\MPS\bak\mscifapp.exe" "C:\Program Files\McAfee.com\MPS"
if exist "C:\Program Files\McAfee.com\Personal Firewall\MpfTray.exe" copy "C:\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" "C:\Program Files\McAfee.com\Personal Firewall"
if exist "C:\Program Files\McAfee.com\VSO\mcmnhdlr.exe" copy "C:\Program Files\McAfee.com\VSO\bak\mcmnhdlr.exe" "C:\Program Files\McAfee.com\VSO"
if exist "C:\Program Files\McAfee.com\VSO\mcvsshld.exe" copy "C:\Program Files\McAfee.com\VSO\bak\mcvsshld.exe" "C:\Program Files\McAfee.com\VSO"
if exist "C:\Program Files\McAfee.com\VSO\oasclnt.exe" copy "C:\Program Files\McAfee.com\VSO\bak\oasclnt.exe" "C:\Program Files\McAfee.com\VSO"
if exist "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe" copy "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\bak\mmtask.exe" "C:\Program Files\MUSICMATCH\Musicmatch Jukebox"
if exist "C:\Program Files\QuickTime\qttask.exe" copy "C:\Program Files\QuickTime\bak\qttask.exe" "C:\Program Files\QuickTime"
if exist "C:\Program Files\Verizon Online\Help Support\SmartBridge\MotiveSB.exe" copy "C:\Program Files\Verizon Online\Help Support\SmartBridge\bak\MotiveSB.exe" "C:\Program Files\Verizon Online\Help Support\SmartBridge"
if exist "C:\Program Files\Verizon Online\Help Support\VerizonSupport.exe" copy "C:\Program Files\Verizon Online\Help Support\bak\VerizonSupport.exe" "C:\Program Files\Verizon Online\Help Support"
if exist "C:\WINDOWS\SYSTEM32\dla\tfswctrl.exe" copy "C:\WINDOWS\SYSTEM32\dla\bak\tfswctrl.exe" "C:\WINDOWS\SYSTEM32\dla"
if exist "C:\WINDOWS\SYSTEM32\hkcmd.exe" copy "C:\WINDOWS\SYSTEM32\bak\hkcmd.exe" "C:\WINDOWS\SYSTEM32"
if exist "C:\WINDOWS\SYSTEM32\igfxpers.exe" copy "C:\WINDOWS\SYSTEM32\bak\igfxpers.exe" "C:\WINDOWS\SYSTEM32"
if exist "C:\WINDOWS\SYSTEM32\igfxtray.exe" copy "C:\WINDOWS\SYSTEM32\bak\igfxtray.exe" "C:\WINDOWS\SYSTEM32"
del replace.bat
Still in Notepad, go to Format (upper menu bar) and untick Word Wrap
Go to File (upper menu bar), and select: Save as
In the Save as prompt:
Save in: Desktop
File Name: replace.bat
Save as Type: Any file
Click: Save
Exit out of Notepad.
Next, on the Desktop, double-click on replace.bat
--------------------------------------------------------------------------------------------------
Run ATF Cleaner by Atribune ©
- Double-click the shortcut on your desktop to run the program.
- Under Main, choose Select All
- Untick Prefetch
- Click Empty Selected
- If you use Firefox browser,
- Click Firefox at the top and choose Select All
- Click on Empty Selected
- NOTE: If you would like to keep any saved passwords, please untick that option.
- Click Exit to close.
- If you use Opera browser,
- Click Opera at the top and choose Select All
- Click on Empty Selected
- NOTE: If you would like to keep any saved passwords, please untick that option.
- Click Exit to close.
----------------------------------------------------------------------------------------------
Also, please run the following:
DelDomains
http://www.mvps.org/.../DelDomains.inf
Right click the above link, Save Target as or Save Link as, and save to the Desktop.
To delete all entries in the Restricted & Trusted Zone list, right click DelDomains.inf
Select: Install
ResetProtocolDefaults
http://www.mvps.org/...colDefaults.reg
Right click the above link, Save Target as or Save Link as, and save to the Desktop.
Right-click ResetProtocolDefaults.reg
Select: Merge
OK the prompt
-----------------------------------------------------------------------------------------
Run FindAWF again and post the log here.
Edited by beynac, 15 November 2006 - 06:38 PM.