<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Trojan.Win32.LinkReplacer Removal Process</title>
	<atom:link href="http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/feed" rel="self" type="application/rss+xml" />
	<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process</link>
	<description>Detect and safely remove malware from your computer.</description>
	<lastBuildDate>Sat, 04 Feb 2012 00:05:25 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.2</generator>
	<item>
		<title>By: Bob</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-93</link>
		<dc:creator>Bob</dc:creator>
		<pubDate>Mon, 17 Dec 2007 21:54:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-93</guid>
		<description>Thanks Jeremy
Your steps worked just fine.  After booting the system in safe mode and removing the file, then rebooting in normal mode cleared the problem.</description>
		<content:encoded><![CDATA[<p>Thanks Jeremy<br />
Your steps worked just fine.  After booting the system in safe mode and removing the file, then rebooting in normal mode cleared the problem.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: courtney</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-72</link>
		<dc:creator>courtney</dc:creator>
		<pubDate>Sat, 15 Dec 2007 07:48:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-72</guid>
		<description>i went to where jeremy said to go and it kept telling me i couldn&#039;t delete it b/c it was open in another program. how do i find this program??</description>
		<content:encoded><![CDATA[<p>i went to where jeremy said to go and it kept telling me i couldn&#8217;t delete it b/c it was open in another program. how do i find this program??</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tony</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-71</link>
		<dc:creator>Tony</dc:creator>
		<pubDate>Sat, 15 Dec 2007 05:20:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-71</guid>
		<description>I followed Jeremy&#039;s directions, but how do I know its gone?</description>
		<content:encoded><![CDATA[<p>I followed Jeremy&#8217;s directions, but how do I know its gone?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rick</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-70</link>
		<dc:creator>Rick</dc:creator>
		<pubDate>Sat, 15 Dec 2007 05:12:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-70</guid>
		<description>Jeremy&#039;s right...everyone just do what he says.</description>
		<content:encoded><![CDATA[<p>Jeremy&#8217;s right&#8230;everyone just do what he says.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mike</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-66</link>
		<dc:creator>Mike</dc:creator>
		<pubDate>Sat, 15 Dec 2007 02:22:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-66</guid>
		<description>Alright,

My computer is infected and there has to be an easier way then what you have here. I go and I can&#039;t find the file...anywhere. Someone give me some insite in to how to do this.</description>
		<content:encoded><![CDATA[<p>Alright,</p>
<p>My computer is infected and there has to be an easier way then what you have here. I go and I can&#8217;t find the file&#8230;anywhere. Someone give me some insite in to how to do this.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bob</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-65</link>
		<dc:creator>bob</dc:creator>
		<pubDate>Fri, 14 Dec 2007 19:39:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-65</guid>
		<description>Worked.  I never clicked &quot;OK&quot; when it said to download....but the popup continued everytime you opened an browser or surfed.  I knew it happened the night before....so did a file search for &quot;msvideo&quot;.  It came up with three choices but only one with yesterday&#039;s date...and without the /SYSTEM attached with it......deleted it and jeremy was correct....problem went away.  Thanks...do this first if you did not get fooled and download the bogus software as the popup tells you to.</description>
		<content:encoded><![CDATA[<p>Worked.  I never clicked &#8220;OK&#8221; when it said to download&#8230;.but the popup continued everytime you opened an browser or surfed.  I knew it happened the night before&#8230;.so did a file search for &#8220;msvideo&#8221;.  It came up with three choices but only one with yesterday&#8217;s date&#8230;and without the /SYSTEM attached with it&#8230;&#8230;deleted it and jeremy was correct&#8230;.problem went away.  Thanks&#8230;do this first if you did not get fooled and download the bogus software as the popup tells you to.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: aaron</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-64</link>
		<dc:creator>aaron</dc:creator>
		<pubDate>Fri, 14 Dec 2007 18:21:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-64</guid>
		<description>can norton or mcaffee find these things as a threat? or does it get bypassed

i ran a nortons scan of whole comp and nothing

havent ran mcaffee yet..hopin that will work

if not ill have to find the fuckin .dll file

is there any easier way? than the shit listed above?</description>
		<content:encoded><![CDATA[<p>can norton or mcaffee find these things as a threat? or does it get bypassed</p>
<p>i ran a nortons scan of whole comp and nothing</p>
<p>havent ran mcaffee yet..hopin that will work</p>
<p>if not ill have to find the fuckin .dll file</p>
<p>is there any easier way? than the shit listed above?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jeremy</title>
		<link>http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process/comment-page-1#comment-63</link>
		<dc:creator>jeremy</dc:creator>
		<pubDate>Fri, 14 Dec 2007 17:15:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.pchubs.com/blogs/trojanwin32linkreplacer-removal-process#comment-63</guid>
		<description>before you spend all this time doing this see if you have msvideo.dll in your windows file. if you do restart in safe mode and delete it and this will all go away. DO NOT DELETE MSVIDEO.DLL IN THE SYSTEM32 FILE AS THIS IS THE ORIGONAL AND NOT INFECTED. good luck</description>
		<content:encoded><![CDATA[<p>before you spend all this time doing this see if you have msvideo.dll in your windows file. if you do restart in safe mode and delete it and this will all go away. DO NOT DELETE MSVIDEO.DLL IN THE SYSTEM32 FILE AS THIS IS THE ORIGONAL AND NOT INFECTED. good luck</p>
]]></content:encoded>
	</item>
</channel>
</rss>

