h00ch
@cgocable.net
| reply to youareallgods
Re: aproposfix
I tried this, but there were no entries in the log. I still cannot see anything in the Device Manager or Network Connecgtions dialog. Can someone suggest something else to try? I've been searching the web trying everything I find, but even this does not work!  |
|
smileatus
@Dial1.Atl
|  Worked great! I tried two other fixes I found on other forums: Making sure the Plug and Play service was running; and setting the permissions for the Enum registry entry, but neither got my Device Manager back. However aproposfix did the trick. Here is the log:
Log of AproposFix v1
************
Running from directory:
C:\_Rick\Fix\aproposfix
************
Registry entries found:
[HKEY_LOCAL_MACHINE\Software\C7XXtAGsMVn5]
@="wNT2s\\2abbabbcb6INROXYabbaqdb6w\\\\3bSYSTEMhgbDRIVERSbKBDREAMScSYS"
"Device"="\\\\.\\Winroxy"
"DriverPath"="C:\\WINNT\\system32\\drivers\\kbdreams.sys"
"DriverName"="IntSENS"
"HideUninstallerName"="C:\\Program Files\\Qui star\\rex00133.exe"
"ServerAddress"="adchannel.contextplus.net"
"LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html"
"PartnerId"="CP.GH2"
"InstallationId"="{Xc932d82-081e-1297-1588-6e2ed72e8e3d}"
"PageFiltering"=dword:00000002
"ClientName"="C:\\Program Files\\Qui star\\gpttpqfe.exe"
"AutoUpdater"="C:\\WINNT\\system32\\ddmernat.exe"
"Version"="2.0.128"
"CrMnTmt"=dword:0036ee80
************
Removing hidden service:
Service IntSENS removed.
Removing hidden folder:
Deleting files:
Deletion of file C:\WINNT\system32\drivers\kbdreams.sys succeeded!
Deletion of file C:\WINNT\system32\ddmernat.exe succeeded!
Backing up files:
Done!
Removing registry entries:
REGEDIT4
[-HKEY_CURRENT_USER\Software\C7XXtAGsMVn5]
[-HKEY_LOCAL_MACHINE\Software\C7XXtAGsMVn5]
Done!
Finished! |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| smileatus, that's what you had. Fixed now 
This line:
"ServerAddress"="adchannel.contextplus.net"
And this line (random named folder in Program files):
C:\\Program Files\\Qui star
Clear signs of the Apropos Adware with Rootkit that this fix was designed for. Your log looks good and you should be ok now.
Ya'll can thank Swandog46 for this fix - he wrote it
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2006
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
