[IsoldeAislinn]

My neighbor has an older version of windows...
He told me that for over a year a 'dos' looking screen pops up upon booting.. reporting this message:

The following command was not found: Firewall set allowed program % systemroot%stem 32\scvhost.exe enable

Does this mean there's a file error? What can I do get this from prompting during every boot?

[evilfantasy]

Download TrendMicro HijackThis.exe (HJT) to the Desktop.

• Double-click on HJTInstall.
• Click on the Install button.
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
• Upon install, HijackThis should open for you.
• Click on the Do a system scan and save a log file button
• HijackThis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
• Do not have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[IsoldeAislinn]

He doesn't have the internet...? So, would that still be the think to do? Doesn't Trend Micro run off the internet? or could i DL it on my PC, put it on CD and get it to his?

[evilfantasy]

You should be able to transfer it over.

[IsoldeAislinn]

thanks, i'll try it out!

[evilfantasy]

Update and transfer over Dr Web also. It is portable so you just have to be sure it is updated before putting it on the infected PC.

Download DrWeb CureIt & save it to your desktop.

Scan with DrWeb-CureIt as follows:

• Double-click on drweb-cureit.exe and then click Start.
• An Express Scan of your PC notice will appear.
• Under Start the Express Scan Now Click OK to start.
  • This is a short scan that will scan the files currently running in memory.
  • If or when something is found, click the Yes button when it asks you if you want to cure it.
• Once the short scan has finished, Click Options > Change settings
• Choose the Scan tab and UNcheck Heuristic analysis and click OK
• Back at the main window, select the Complete scan button.
• Then click the Green Arrow Start Scanning button on the right and the scan will start.
  • Click Yes to all if it asks if you want to cure/move any file(s).
• When the scan is done.
• In the Dr.Web CureIt menu on top left, click File and choose Save report list.
• Save the DrWeb.csv report to your Desktop.
• Exit Dr.Web Cureit.

• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.

• After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
• Copy and paste that log in the next reply