re: wwwcoolwebsearch.msconfig Sunday, October 31, 2004 at 12:17 am Windows XP Annoyances Discussion Forum Posted by Ms. Eagle (33507 messages posted) Pat, you need to get rid of this trojan. It's a serious security risk. Treb trojan: a trojan that gives remote access to your system using listening proxy servers. You can also uninstall all instances of either of these listed in Add/Remove programs: PowerReg Scheduler and BackWeb. Additionally, if there's anything suspicious, or something you didn't install yourself, remove it. Note the first two 04 entries? Those are trojans, nothing to do with MS. Log off and close ALL open windows. Run HJT. Select these items. Choose Fix checked. Reboot into SAFE MODE. O4 - HKLM\..\Run: [Microsoft Updater Resources] Win32Fixer.exe O4 - HKLM\..\RunServices: [Automatic Microsoft Windows Updater] SUCHOST.EXE O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? Make sure all hidden files are showing: How to Show System Files Run a search for these files and delete them: Win32Fixer.exe SUCHOST.EXE Problematic Windows app: mdm.exe Clear out ALL temp folders, while still in safe mode. Internet Options - delete TIF and choose 'delete all Offline content'. Empty C:\Windows\temp folder and C:\temp folder, if you have one. XP-> C:\Documents and Settings\username\Local Settings\Temp (for all users). Empty Recycle bin. Reboot into Normal mode. Then please run HJT again and post the New log, and someone will check it out. P.S. In the meantime, if you don't have Spyware Blaster installed, I suggest you do that, download updates then enable protection. Dealing with Unwanted Spyware and Parasites Written in response to: re: wwwcoolwebsearch.msconfig (pat rhodes: Saturday, October 30, 2004 at 9:27 pm) There are presently no replies to this message. All messages in this thread [show all] wwwcoolwebsearch.msconfig (pat rhodes: Fri, Oct 29, 2004, 8:48 pm) re: wwwcoolwebsearch.msconfig (James Hilke: Fri, Oct 29, 2004, 9:08 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Fri, Oct 29, 2004, 9:25 pm) re: wwwcoolwebsearch.msconfig (Yap: Fri, Oct 29, 2004, 9:30 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 8:52 am) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 9:08 am) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 9:30 am) re: wwwcoolwebsearch.msconfig (Falcon: Sat, Oct 30, 2004, 4:25 pm) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 5:23 pm) re: wwwcoolwebsearch.msconfig (Yap: Fri, Oct 29, 2004, 9:31 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 9:29 am) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 5:22 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 5:44 pm) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 5:57 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 7:09 pm) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 7:22 pm) re: wwwcoolwebsearch.msconfig (Falcon: Sat, Oct 30, 2004, 7:47 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 9:27 pm) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 9:39 pm) re: wwwcoolwebsearch.msconfig (pat rhodes: Sat, Oct 30, 2004, 10:05 pm) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 10:58 pm) re: wwwcoolwebsearch.msconfig (Ms. Eagle: Sun, Oct 31, 2004, 12:17 am) re: wwwcoolwebsearch.msconfig (Yap: Sat, Oct 30, 2004, 10:53 pm) Reply or follow-up to this message Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum