Help - trying to remove BraveSentry etc

[ShadowPuterDude]

Copy the contents of the below quote box to Notepad; Save As FixReg.reg to your Desktop; make sure File Type: is set to All Files (*.*).

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\runonceex]
"Flag"=-
"Windows Update"=-

Close Notepad.

Locate FixReg.reg on your Desktop. Double-click on it and answer 'Yes' when asked if you want to merge with the registry.

If curr entversion looks like this in the above patch, delete the space. It's not supposed to be there.

Run MsConfig and enable everything that is disabled. MsConfig is a diagnostic tool, and not intended to be used in the manner you are using MsConfig. If you are receiving error messages, related to these items, at system start; we can fix this without using MsConfig. You will have to restart your computer for the changes to take effect.

Using Windows Explorer (right click the Start button and select Explore to open Windows Explorer) navigate to C:\ISeeYouXP and locate the following script:
ShowIT.bat

Double-click to run the batch.

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click Delete Selected Temp Files
Then after it deletes the files click the Exit (Save Settings) button.

NOTE: Pocket Killbox will only list the added files it is able to find on the system. So when you do the below, if some files do not show in the list after pasting them in, just continue..

Select:

• Delete on Reboot
• then Click on the All Files button.
• Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

  C:\WINDOWS\scvhost.exe

• Return to Killbox, go to the File menu, and choose Paste from Clipboard.
• Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

If the file isn't there Killbox will tell you it couldn't find the file.

Please attach a fresh ISeeYouXP log. This log is quite long and it's easier to read as 1 file.

[jholland1964]

As you can see by the above post StckFigure, I had to call in the "big guns" finally on this one. Follow ShadowPuterDude's instructions exactly. He is the creator of ISeeYouXP so he knows what he is doing!
I figured it was time we did more than try to go for the thread with the record number of posts in it...but I think we may have that all ready.

[StckFigure]

KillBox error: PendingFileRenameOperations Registry Data has been removed by external process!

[StckFigure]

Upon reboot, I got no messages at all, neither confirming nor denying that the file was found. I'm taking that to be what's supposed to happen if the file IS found?

Log coming up, but I don't think it's going to *fit* in one post, unfortunately... there's a 50,000 character limit, and the last post was something like 120,000. If it does prove too difficult to read this way, I can email it to you if you'd like.

[jholland1964]

Upon reboot, I got no messages at all, neither confirming nor denying that the file was found. I'm taking that to be what's supposed to happen if the file IS found?

Log coming up, but I don't think it's going to *fit* in one post, unfortunately... there's a 50,000 character limit, and the last post was something like 120,000. If it does prove too difficult to read this way, I can email it to you if you'd like.

Please note ShadowPuterDude's instructions;

Please attach a fresh ISeeYouXP log.

In other words UPLOAD it here as an attachment by scrolling down and choosing Manage Attachments. Then you will browse your computer for the log and attach it to your post.

[StckFigure]

For some reason, the forum's limits on file types are all different, so the text log didn't fit, but I've compressed it into a ZIP and *that* fit, so here it is zipped up. If you need me to post it directly, I can do that, too, but it will take three or four separate posts to cover it all.

[jholland1964]

This is just the way we need to see it.
Did you re-enable all those msconfig items and reboot after you did that?
Did you run the regedit as instructed?

[StckFigure]

Yup, I re-enabled everything I could possibly find in MSConfig (services and startups) and did the regedit. I should be all caught up to where I should be right now.

And.... and.... virus free?! Do I dare even wish it? Because, like you, I think I'd rather have that than 300 posts

[jholland1964]

Let's wait to have ShadowPuterDude read the log, I am not that familiar with this program.
Judy

[F1]

I've relaxed the restrictions on how many characters a post may have so that large logfiles can be displayed without resorting to .zip files. I hope this helps everyone out.




Charlie