Home > Help Me > Help Me With This HJT Log Please!

Help Me With This HJT Log Please!

Unregister the dll(s) we're going to remove, by entering the following: regsvr32 /u wid3.dll It's ok, if these aren't found or 'error' out. Check the box labelled 'Turn off System restore'. O15 - Unwanted sites in Trusted ZoneWhat it looks like: O15 - Trusted Zone: http://free.aol.comO15 - Trusted Zone: *.coolwebsearch.comO15 - Trusted Zone: *.msn.comWhat to do:Most of the time only AOL and You will receive a prompt asking if you want to remove the files, click YES Once you click yes, your desktop will go blank as it starts removing Vundo.

Experts who know what to look for can then help you analyze the log data and advise you on which items to remove and which ones to leave alone. The list should be the same as the one you see in the Msconfig utility of Windows XP. In the last case, have HijackThis fix it.O19 - User style sheet hijackWhat it looks like: O19 - User style sheet: c:\WINDOWS\Java\my.css What to do:In the case of a browser slowdown Always fix this item, or have CWShredder repair it automatically.O2 - Browser Helper ObjectsWhat it looks like:O2 - BHO: Yahoo!

You may have to register before you can post: click the register link above to proceed. Start a new discussion instead. Here's my new log: Logfile of HijackThis v1.99.1 Scan saved at 9:47:55 AM, on 11/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe Hence I decided to use Hijackthis to thoroughly check.

Login now. If the name or URL contains words like 'dialer', 'casino', 'free_plugin' etc, definitely fix it. The posting of advertisements, profanity, or personal attacks is prohibited. Check for Windows Updates.

Using the site is easy and fun. MS MVP 2006 and ASAP member since 2004... This is because, most times, it finds threats from the browsing history, recent docs. website here Kozierok.

Find The PC Guide helpful? In the most cases this is the result of trojans. Do I delete them? by BlueEyez / March 16, 2005 9:50 AM PST Logfile of HijackThis v1.99.1Scan saved at 10:31:35 AM, on 3/17/05Platform: Windows 98 SE (Win9x 4.10.2222A)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\SYSTEM\MSTASK.EXEC:\WINDOWS\SYSTEM\KB891711\KB891711.EXEC:\WINDOWS\EXPLORER.EXEC:\PROGRAM FILES\GRISOFT\AVG

Use a firewall to help prevent your PC's control being usurped by undesireables. read this post here Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

CNET have posted hjt log 2 replies my computer is plagued with pop-ups, and spybot nor norton seem to know why. However, since only Coolwebsearch does this, it's better to use CWShredder to fix it.O20 - AppInit_DLLs Registry value autorunWhat it looks like: O20 - AppInit_DLLs: msconfd.dll What to do:This Registry value

Just paste your complete logfile into the textbox at the bottom of this page. Better yet, use an alternative browser! All Rights Reserved. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".[*]Click on this link to see a list of programs that should be disabled.

VundoFix v. 4 by Atribune Please download VundoFix.exe and save it to your desktop Double-click VundoFix.exe to run it. This entry was classified from our visitors as good. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged Stay informed with Comcast Alerts Alerts are an easy, quick way to manage your account and get information - like payment confirmations and your current balance.

Last Post 1 Month Ago What does Google have from serving us with Google Fonts? Please don`t post your own virus/spyware problems in this thread. If the IP does not belong to the address, you will be redirected to a wrong site everytime you enter the address.

This computer is running WinNT and that suggests it is quite old...

Back to top #4 Clcast Clcast Topic Starter Members 6 posts OFFLINE Local time:05:11 AM Posted 29 June 2016 - 04:14 PM Also, I'm not sure why the site hijackthis.de They rarely get hijacked, only Lop.com has been known to do this. Please let me know how your pc is now. 0 Discussion Starter azurejewels 11 Years Ago Thank you for helping me! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabWhat to do:If you don't recognize the name of the object, or the URL it was downloaded from, have HijackThis fix

Pages 1 2 >> Next… This thread is now locked and can not be replied to. Please enter a valid email address. Options Mark as New Bookmark Subscribe Subscribe to RSS Feed Highlight Print Report Help please... Follow Us Facebook How To Fix Buy Do More About Us Advertise Privacy Policy Careers Contact Terms of Use © 2017 About, Inc. — All rights reserved.

Should you see an URL you don't recognize as your homepage or search page, have HijackThis fix it.O1 - Hostsfile redirectionsWhat it looks like:O1 - Hosts: auto.search.msn.comO1 - Hosts: O17 - HKLM\System\CCS\Services\Tcpip\..\{83c1b1d4-ac0b-4230-8f5c-97e5d43aadf7}: NameServer =, Do you know the IP or Domain ','? Canada Local time:11:11 PM Posted 08 July 2016 - 06:53 AM Are you still with me? Then continue on.

Book your tickets now and visit Synology. We recommend you to use a firewall. Here's my HJT log, any help is greatly appreciated Logfile of HijackThis v1.99.1 Scan saved at 9:48:42 AM, on 10/31/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=27234&messageID=306550 writes:" HJT is a very powerful tool and only advanced users should use it.

Click the Scan for Vundo button Once it's done scanning, click the Remove Vundo button. One of the best places to go is the official HijackThis forums at SpywareInfo. After something like this it is a good idea to Flush the Restore Points and start fresh. Click here to Register a free account now!