About Blank And Notepad

SINCE I CANNOT LOCATE REG . I used regedit Pehaps this is not usefuel but here it is anyway EXPORT Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "DeviceNotSelectedTimeout"="15" "GDIProcessHandleQuota"=dword:00002710 "Spooler"="yes" "swapdisk"="" "TransmissionRetryTimeout"="90" "USERProcessHandleQuota"=dword:00002710 THANKS

FROM REGEDIT NOT the same as youir requested Maunally from menu EXPORT This is the best I can do … Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "DeviceNotSelectedTimeout"="15" "GDIProcessHandleQuota"=dword:00002710 "Spooler"="yes" "swapdisk"="" "TransmissionRetryTimeout"="90" "USERProcessHandleQuota"=dword:00002710

Hello nyc_2005 I am sorry but I did give you the wrong instructions for sfc it should have been sfc /scannow instead and I am glad you were able to find it. I have no idea why the 'Reg save' is not working on your system as it normally works on all OS's. The export you did of the windows key did tell me something because I compared it to mine and they are the same with the exception of yours not showing the AppInit_DLLs key. That tells me that it is unlikely that you have a controlling link to a file in that key which means no hidden dll. There are probably quite a few files that are still infected, but first the service needs to be removed that was added by the infection. I do need a new HijackThis log to be able to give you current instructions (the file names change with reboots) and your last HIjackThis log showed very few infected files if any. So please Scan again with HijackThis POST a new log file here in this thread using Add Reply and I will give you instructions on what to remove. Good Luck!

I am glad that we were able to help! I am closing this topic now, but if you need it reopened, please send an email to the following link(Click for address) with the Subject line of the email "Reopen".
To receive a response, please include in your email: the user name used in the post, details of why you need it reopened, and a valid link to the post.

Emails with bad links to the post, emails that are not from the original poster, and emails that do not have "ReOpen" as the subject line, will be deleted without being opening.

Please start a New Topic if this is not your thread. Thank-you for your co-operation.