re: TROJAN OR VIRUS ... help ... not sure what to do!
Sunday, May 2, 2004 at 12:59 pm Windows XP Annoyances Discussion Forum
Posted by Kenneth
(57 messages posted)
Start with fixing these items
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\aphnho.dll/sp.html
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
After you fix these items shutdown, restart run hijack this again see if they are
back. I am not completely sure about this one.
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} - http://www.installengine.com/engine/isetup.cab
But
if it is bad, spyware guard should find it.
Post back with results
|
All messages in this thread [show all]
 |  |  |  |  |  | Oops (Kenneth: Sun, May 2, 2004, 1:37 pm) |
 |  |  |  | re: TROJAN OR VIRUS ... help ... not sure what to do! (Kenneth: Sun, May 2, 2004, 12:59 pm) |
| |
| |
Return to the Windows XP Discussion Forum
|
|