Author Topic: Please Help, Antivir found Drop.Delf.EV.2.....  (Read 3131 times)

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Please Help, Antivir found Drop.Delf.EV.2.....
« Reply #20 on: December 19, 2004, 03:17:44 AM »
Let's try this again

Open Notepad (START>>>RUN>>>type in notepad) hit Enter
Copy the contents of the Quote box to notepad
In Notepad click FILE>>SAVE AS
Important>>Change the Save as Type to All Files.
Name the file as Removetrusted.reg

Save this file on the desktop


Quote
REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains][-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\63.219.181.7]
"http"=dword:00000004

Double click and allow Removetrusted.reg to merge to the registry

Restart your computer and post back

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Niteraven

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Please Help, Antivir found Drop.Delf.EV.2.....
« Reply #21 on: December 19, 2004, 04:01:20 AM »
trusted sites button is still greyed out  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/sad.gif\' class=\'bbc_emoticon\' alt=\':(\' />

Guest_Chris

  • Guest
Please Help, Antivir found Drop.Delf.EV.2.....
« Reply #22 on: December 19, 2004, 03:39:00 PM »
Other than that everything appears to be okay, just cant figure out how to get it back, Nothing is finding anything wrong so I am assuming something in the registry is greying it out

Guest

  • Guest
Please Help, Antivir found Drop.Delf.EV.2.....
« Reply #23 on: December 19, 2004, 09:12:49 PM »
For now until I can track down a reg fix for it
You can do a few things that may help fix it
It's coming Xmas right away and I can only pop in here once in awhile, so you need to keep your system secure


Get Service Pack 1a and install it
 I supplied a link
Install SpywareBlaster and IE-Spyad

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Please Help, Antivir found Drop.Delf.EV.2.....
« Reply #24 on: December 20, 2004, 11:14:01 PM »
Try downloading this file from deldomains.zip

Unzip the contents to your desktop
Right Click deldomains.inf and Choose Install

You may have to log off and log back on

If you have SpywareBlaster and IE-Spyad installed, I hope you do
You will have to enable they're protection again

Not sure if you'll see this,but also look in the registry

for
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\InternetSetting s\ZoneMap\ProtocolDefaults\

you've probably got 'http = 2'

If so, change it to 3 and repeat for the same key in hkey_current_user
« Last Edit: January 13, 2005, 01:55:24 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here