re: need lots of help, spyware, hijackthis log
Thursday, March 30, 2006 at 6:35 pm Windows Me Annoyances Discussion Forum
Posted by MrCharlie
(4474 messages posted)
OK, lets start here:
Download and unzip the KillBox
to a folder - we'll use it later.
Reboot into safe mode
You can do this by restarting your computer and continually tapping the F8 key until
a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.
Close ALL programs down, leaving ONLY HijackThis running - Click Scan and.....
Place a check against the following items:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 255.255.255.255 www.casinoxo.com
O2 - BHO: (no name) - {00000010-0000-0010-8000-000000000002} - C:\PROGRAM FILES\ANNOTATE.NET\ANNOTATEBHO.DLL
(file missing)
O2 - BHO: BrowserHelper Class - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD0.DLL
O2 - BHO: (no name) - {39FF1454-E946-19E6-8753-60550AA12F1C} - C:\WINDOWS\SYSTEM\QPCN.DLL
(file missing)
O3 - Toolbar: &Search - {3F5A62E2-51F2-11D3-A075-CC7364CAE42A} - C:\WINDOWS\SYSTEM\JFI.DLL
(file missing)
O15 - Trusted IP range:
O15 - Trusted IP range: (HKLM)
O16 - DPF: {6D5FCFCB-FA6C-4CFB-9918-5F0A9F7365F2} (GigexCtrl ActiveX) - http://www.gigex.com/tv/igor/gigexagent.dll
Click on Fix Checked and exit HijackThis.
Now open up the KillBox and copy and paste each one of these in and hit delete, if
the file exists, it will appear in blue under the window, if not move on to the next
file.
C:\PROGRAM FILES\ANNOTATE.NET\ANNOTATEBHO.DLL
C:\PROGRAM FILES\ANNOTATE.NET
C:\WINDOWS\SYSTEM\NZDD0.DLL
C:\WINDOWS\SYSTEM\QPCN.DLL
C:\WINDOWS\SYSTEM\JFI.DLL
Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr.
Let it scan your system for files to remove. Make sure these 3 are checked and then
press *ok* to remove:
Temporary Files
Temporary Internet Files
Recycle Bin
Reboot and
Open up Internet Explorer , Tools, General Tab, reset your home page to what you
want, now the Programs Tab, click Reset Web Settings
That will change everything back to the default settings.
See if you can run the Shredder - I gave you the link to download the files you may
need.
Reboot and post a fresh HijackThis log and we'll take another look. MrC
PS: gone for tonight
|
All messages in this thread [show all]
 |  |  |  | re: need lots of help, spyware, hijackthis log (MrCharlie: Thu, Mar 30, 2006, 6:35 pm) |
| |
| |
| |
Return to the Windows Me Discussion Forum
|
|