[cybertech]

Click Start - Run - and type in:

services.msc

Click OK.

In the services window find each of these, one at a time:

Microsoft authenticate service (MsaSvc)

Right click and choose "Properties". On the "General" tab under "Service Status" click the "Stop" button to stop the service. Beside "Startup Type" in the dropdown menu select "Disabled". Click Apply then OK.
Exit the Services utility.


Note: You may get an error here when trying to access the properties of the service. If you do get an error, just select the service and look there in the top left of the main service window and click "Stop" to stop the service. If that gives an error or it is already stopped, just skip this step and proceed with the rest.


Run HJT again and put a check in the following:

O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe (file missing)

Close all applications and browser windows before you click "fix checked".


How is it running now? Any problems?

[ospinto]

Running well without any problems. THANKS A LOT, cybertech!!!

[cybertech]

Great!

It's a good idea to Flush your System Restore after removing malware:

• On the Desktop, right-click My Computer.
• Click Properties.
• Click the System Restore tab.
• Check Turn off System Restore.
• Click Apply, and then click OK.
• Restart the computer.

To create a new restore point:

• Start go to All Programs
• Accessories, System Tools and select System Restore.
• In the System Restore wizard, select "Create a restore point" and click the Next button.
• Type a description for your new restore point. Something like "After trojan/spyware cleanup".
• Click Create and you're done.

You're welcome!

[ospinto]

Hi Cybertech,
Don't see a system restore in My Computer or System Tools....

[cybertech]

Sorry about that...

W2K doesn't have one!