re: need lots of help, spyware, hijackthis log
Thursday, March 30, 2006 at 7:30 pm
Windows Me Annoyances Discussion Forum
Posted by Jay
(15 messages posted)
thanks so much for responding mrcharlie, i will do this in the morning ass im off
as well. earlier i regained access to my control panel using the files on merijn.org
thanks again mrcharlie and i will proceed with your other advice in the morning
On Thursday, March 30, 2006 at 6:35 pm, MrCharlie wrote:
>
>OK, lets start here:
>Download and unzip the KillBox
>to a folder - we'll use it later.
>
>Reboot into safe mode
>
>You can do this by restarting your computer and continually tapping the F8 key until
>a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.
>
>
>Close ALL programs down, leaving ONLY HijackThis running - Click Scan and.....
>Place a check against the following items:
>
>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = ,
>R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
>R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
>O1 - Hosts: 255.255.255.255 www.casinoxo.com
>O2 - BHO: (no name) - {00000010-0000-0010-8000-000000000002} - C:\PROGRAM FILES\ANNOTATE.NET\ANNOTATEBHO.DLL
>(file missing)
>O2 - BHO: BrowserHelper Class - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD0.DLL
>O2 - BHO: (no name) - {39FF1454-E946-19E6-8753-60550AA12F1C} - C:\WINDOWS\SYSTEM\QPCN.DLL
>(file missing)
>O3 - Toolbar: &Search - {3F5A62E2-51F2-11D3-A075-CC7364CAE42A} - C:\WINDOWS\SYSTEM\JFI.DLL
>(file missing)
>O15 - Trusted IP range:
>O15 - Trusted IP range: (HKLM)
>O16 - DPF: {6D5FCFCB-FA6C-4CFB-9918-5F0A9F7365F2} (GigexCtrl ActiveX) - http://www.gigex.com/tv/igor/gigexagent.dll
>
>Click on Fix Checked and exit HijackThis.
>
>Now open up the KillBox and copy and paste each one of these in and hit delete,
if
>the file exists, it will appear in blue under the window, if not move on to the
next
>file.
>
> C:\PROGRAM FILES\ANNOTATE.NET\ANNOTATEBHO.DLL
>C:\PROGRAM FILES\ANNOTATE.NET
> C:\WINDOWS\SYSTEM\NZDD0.DLL
> C:\WINDOWS\SYSTEM\QPCN.DLL
> C:\WINDOWS\SYSTEM\JFI.DLL
>
>Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr.
>Let it scan your system for files to remove. Make sure these 3 are checked and then
>press *ok* to remove:
>
>Temporary Files
>Temporary Internet Files
>Recycle Bin
>
>Reboot and
>
>Open up Internet Explorer , Tools, General Tab, reset your home page to what you
>want, now the Programs Tab, click Reset Web Settings
>That will change everything back to the default settings.
>
>See if you can run the Shredder - I gave you the link to download the files you
may
>need.
>
>Reboot and post a fresh HijackThis log and we'll take another look. MrC
>
>PS: gone for tonight
>
>
|
All messages in this thread [show all]
 | | | |  | re: need lots of help, spyware, hijackthis log (Jay: Thu, Mar 30, 2006, 7:30 pm) |
| |
| |
| |
Return to the Windows Me Discussion Forum
|
|
