[Flrman1]

First Click here to download CWShredder. Do Not run it yet. Unzip it to the desktop and have it ready to run later.

Now download the Win98Fix.zip from here:

http://www10.brinkster.com/expl0iter...ast/pvtool.htm

You must UnZip it first. Open the Win98Fix folder that you just extracted and doubleclick on the RunFix.reg file inside. Answer "Yes" when asked if you want to add it's contents to the registry.

Restart your computer

Now restart again into safe mode.

How to start your computer in safe mode

First in safe mode click on My Computer then go to View > Folder Options. Click on the "View" tab and make sure "Show all files" is ticked and uncheck "Hide file extensions for known file types". Click "Like Current Folder" then click "Apply" then "OK"

Now find and delete:

The C:\WINDOWS\SYSTEM\COMKD.DLL file

Finally, run CWShredder. Just click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do it's thing.

Boot back to normal and run StartDreck again as you did before and post another log from it and another Hijack This log.

[Ziggy1]

I downloaded the files and proceded to click on "RunFix.reg" but I don't get a prompt to add it to the registry.

Should I skip the step and proceed to delete COMKD.dll (or rename it 1st)

[Flrman1]

Did you unzip the file first? Did you get an error? Exactly what did happen?

[Ziggy1]

I downloaded CWSchredder and Win98Fix, then unzipped them to there own (New) folders. Then I double clicked on the RunFix.Reg and nothing happened?


I searched for that File COMKD.dll but it is not there (followed your folder instructions)

[Flrman1]

The rason the reg file isn't working is because something has disabled regedit. I just read your first post in this thread

I can't run Regit or run in safe mode and Notepad won't run

Click here to download a new copy of notepad.exe.
It is in a zipped folder so you will have to Unzip it to the C:\Windows folder.

That'll fix notepad, but I'm really not sure what we can do about regedit. I'm not that great with Windows 98.

Candy, any ideas. Maybe scanreg /restore?

[~Candy~]

Perhaps.

Can you do this, start, run, scanreg and hit ok..........are you backed up for today already? If so, can't hurt to try, you can always have him go back to today.

[Ziggy1]

What will happen if I run CWSchredder anyways?

[Flrman1]

It will temporarily fix the hijack, but it will return if we don't find that file and delete it. We need to run the RunFix.reg file to make the file visible first so it can be deleted. There's no need in running CWShredder.

[Ziggy1]

Ok I got into the registry by bringing up the Dos prompt on the start menu. I completely forgot it was there.

Where should I go to find the bugs

[Ziggy1]

Thanks for the help tonight guys, I have to "Call it a night" I'll check back tomorrow.

[Flrman1]

Go into regedit like you did before and navigate to this key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnc e


Navigate to that key and right click on the RunServicesOnce and choose "Export". Export it to the desktop and name it "runonce.reg". Got to the runonce.reg file on your desktop and right click it and choose "Edit". It will open in notepad. Copy the contents and paste it here please.

[Flrman1]

Any progress here?

[Ziggy1]

Hi Flrman1,

Thanks, I didn't have time to get on the computer last night.

I went to the path below as you instructed but there is no value to copy? It is named "Default" and says "Value not set" if I double click on it there is nothing in the field.


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnc e

[Ziggy1]

I attached some registry screen shots that I think should be changed.


I also have a program CCapp that is running, and crashes. not sure what it is for but I'll look it up. Also my e-mail is giving me problems not sure if it is related but I can't send receive.

[Flrman1]

Well your Startdreck log shows that this is there:

RunServicesOnce
**zu=rundll32 C:\WINDOWS\SYSTEM\COMKD.DLL,StreamingDeviceSetup

Are you sure you looked in the right place?