Re: Deleting Temp folder

Turn off system restore then Download, install, update and run all of the
following.

CrapCleaner
http://www.pcbutts1.com/downloads/ccsetup123.exe

Ad-Aware
http://www.pcbutts1.com/downloads/aawsepersonal.exe

Spybot search and destroy
http://www.pcbutts1.com/downloads/spybotsd14.exe

Ewido Security Suite Trial version
http://www.pcbutts1.com/downloads/ewidosetup.exe

Microsoft Windows AntiSpyware (Beta1)
http://www.microsoft.com/downloads/details.aspx?FamilyId=321CD7A2-6A57-4C57-A8BD-DBF62EDA9671&displaylang=en

If none of the above fixes the issue then download Hijack this, run it, save
a copy of the log file and cut and paste it back here to this group so that
I can analyze it. Ignore anyone especially the troll Leythos, who will tag
along a nonsense post to this message, who tells you to post it elsewhere. I
need to see it not them.


HijackThis
http://www.pcbutts1.com/downloads/HijackThis.zip


The authors of the above programs, with the exception of Microsoft has given
the owner of pcbutts1.com express written permission to redistribute their
software.

--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com



"Katie" <anonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:u0$qI8JuFHA.1136@xxxxxxxxxxxxxxxxxxxxxxx
> Hi, please can some one offer some advice?
> 2 days ago I opened a downloaded quick time movie but it didnt play so
> when i clicked the play icon i had lots of pop ups which directed me to a
> website which said
> THIS WEBSPACE HAS BEEN SUSPENDED DUE TO NON PAYMENT!.
> It gave the name of the www. to get the site online. "control dot
> streameline dot net" and because I had a web page open at that time now
> each time i go to that web page it says the same thing. I know there is
> nothing
> wrong with the real website as I have another pc and it is ok on there.
> Also the websites address doesnt change as if it is redirected.
> So i have done virus scans, and adaware scans, (I also had my firewall on
> and pop up blocker on too) but nothing found anything except for one
> online scan which said I had an unknown Trojan in
> "C:\Documents and Settings\chrissy\local settings\temp\autorun.exe"
> "C:\Documents and Settings\chrissy\local settings\temp\autorungui.dll"
> But the online scan wont remove it. So I remembered that on my other pc
> Windows ME i could delete the temp contents without causing problems.
> However now this laptop is XP and the Temp folder is quite different. In
> it i have seen lots of other folders and things that look like they are
> not meant to be deleted.
> Can I safely delete the Temp folder in XP? I did a search for the files
> that the online scan found and my search on my laptop couldnt find it at
> all.
> Is it possible for me to edit the registry to detach the trojan from this
> web site? Can some one tell me how to do that please? I really need
> access to the website on this laptop.
> Please can any one offer me any help?
> Thanks so much in advance.
> Chris
>
>
>


.