[Cookiegal]

There were lingering run keys in the registry for that user wanting to load those files, even though the files themselves were missing so we deleted the run keys.


Here are some final instructions for you.

The following program will remove the tools we've used and their associated files and backups and then it will delete itself.

Please download OTMoveIt2 by OldTimer.

• Save it to your desktop.
• Make sure you have an Internet Connection.
• Double-click OTMoveIt.exe to run it. (Vista users, please right-click on OTMoveIt2.exe and select "Run as an Administrator")
• Click on the CleanUp! button
• A list of tool components used in the cleanup of malware will be downloaded.
• If your firewall or real-time protection attempts to block OTMoveIt2 to reach the Internet, please allow the application to do so.
• Click Yes to begin the cleanup process and remove these components, including this application which will delete itself.
• You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.

Now you should turn system restore off to flush out all previous system restore points, then turn it back on and create a new restore point:

To turn off system restore, on the Desktop, right click on My Computer and click on Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply and then click OK.

Restart your computer, turn System Restore back on and create a restore point.

To create a new restore point, click on Start – All Programs – Accessories – System Tools and then select System Restore.

In the System Restore wizard, select Create a restore point and click the Next button.

Type a name for your new restore point then click on Create.


I also recommend downloading SPYWAREBLASTER for added protection.

Read here for info on how to tighten your security.


Delete Temporary Files:

Go to Start - Run and type in cleanmgr and click OK.
Let it scan your system for files to remove.
Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
Press OK to remove them.

[Shemsu-Hor]

Hi there Cookiegal,
Firstly, my apologies for not updating since Sunday, was called out to help with a job 1st thing Monday morning and only got home this evening.
Secondly, many many thanks with your help and patience this last week it has been very much appreciated by myself and obviously will be by my friends who actually own the machine in question when I confess to requiring help with it
Finally, the machine is heading back to it's rightfull owners in the morning as I am happy that it is now behaving itself sufficiently for it to be put back into use.
Again, many thanks from Bonnie Scotland and I wish you all the best.

[Cookiegal]

It's my pleasure.

Sorry I didn't reply sooner but I never received an e-mail notification of your reply.