dvk01
April 25th, 2004, 10:38 AM
as well as the obvious entries in a hjt log
run hijackthis and fix this entry also if it exists
O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\System32\MSZTCE.EXE
you can try to find the C:\WINDOWS\System32\MSZTCE.EXE file and delete it but you won't ( or at least no-one I know has found it yet), but if you search in c:\windows you WILL find a random numbered or series of random numbered .exe files something like 70000045.exe please find and copy their names & locations, they need to be fixed a bit later. they have to be deleted in safe mode as something running, normally the MSZTCE.EXE file locks them to prevent removal easily.
in 9x or ME systems the MSZTCE.EXE entry will be
O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\System\MSZTCE.EXE
or O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\MSZTCE.EXE
run hijackthis and fix this entry also if it exists
O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\System32\MSZTCE.EXE
you can try to find the C:\WINDOWS\System32\MSZTCE.EXE file and delete it but you won't ( or at least no-one I know has found it yet), but if you search in c:\windows you WILL find a random numbered or series of random numbered .exe files something like 70000045.exe please find and copy their names & locations, they need to be fixed a bit later. they have to be deleted in safe mode as something running, normally the MSZTCE.EXE file locks them to prevent removal easily.
in 9x or ME systems the MSZTCE.EXE entry will be
O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\System\MSZTCE.EXE
or O4 - HKLM\..\Run: [MSZTCE] C:\WINDOWS\MSZTCE.EXE