DDD wrote:
> Thank you tohe people who have replied to my earlier question.
>
> iam not really not on what to do.
>
> I hav never reintalled vista before so i thought i might try searching the
> ristry like David H. Lipman had suggested.
>
> Please could you please state how to remove this, as i am not very
> experiened with computers.
Simply put, either your computer was infected with malware and your
antivirus/antispyware programs removed the malware but left a reference
to the malware in Startup (the pmnk.dll) OR your computer is still
infected and needs to be cleaned.
I'll give you the information you need to make sure your computer is
virus/malware-free and also to remove the Startup reference BUT based on
your post you may wish to have a computer professional take care of this
for you. I say this not to offend you, but simply from a practical
standpoint. There is no shame in admitting this isn't your cup of tea
and taking the machine to a professional computer repair shop (not your
local equivalent of BigComputerStore/GeekSquad). Please be aware that
not all local shops are skilled at removing malware and even if they
are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you
take the machine into a shop.
A. For malware removal:
Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/...moving_Malware
Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/siche...ning_tool.html
- download site
The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.
You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).
Not all tools used will work in Vista and you will need to run them
elevated. If you are unable to remove the infection by following the
general steps, register at one of the HijackThis forums as suggested.
B. If the computer is clean, to remove from Startup:
Start Orb>Start Search box>msconfig [enter]
If you are prompted for an administrator password or for a confirmation,
type the password, or click Continue. Then see what is on the Startup
tab. You don't need to restart immediately, but the next time you do
you'll get a dialog saying you've used the Utility. Usually in Vista
this will be blocked by Windows Defender and you'll need to allow it so
you can then tick the box that says in effect, "don't bother me about
this again".
Important - Do not use the System Configuration Utility to stop
processes. Instead, use Start>Run>services.msc [enter] and do not stop
any services unless you really, really know what you're doing.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User