Hijack This help

**hAvAAck** · #21 2nd Sep 2007, 14:58

his combo log

**Sideways52** · #22 2nd Sep 2007, 15:00

sorry to have havaack do it.. for some reason i couldn't upload it. in IE or Firefox.

**evilfantasy** · #23 2nd Sep 2007, 15:19

OK, have you noticed any change now?
Are you downloading other tools? SpyEraser? <<<Rouge Anti-Spyware!!!!!!!

I need another HJT log please.

**Sideways52** · #24 2nd Sep 2007, 15:26

noticing some change for the better.. shut down still takes forever... the pop ups have become less. Avast has not given me a warning so far. Only SpyWear programs I've DL have been AdAwear 2007 and Uniblue's Power Suite. HJT log attached.

**evilfantasy** · #25 2nd Sep 2007, 15:57

SpyEraser Review
It has been reported to give false positives, and popups.

Quote:

Uniblue Systems
http://www.liutilities.com
SpyEraser is a danger to itself and to others. It's poor at removing existing spyware, sometimes killing innocent processes, and it's even worse at keeping systems from getting infected in the first place. Look elsewhere for spyware protection.

Items to remove in HJT
O2 - BHO: (no name) - {22EED4F2-DE82-4410-8234-E61DDB17F342} - (no file)
O20 - Winlogon Notify: gebcd - C:\WINDOWS\system32\gebcd.dll (file missing)
O20 - Winlogon Notify: yayywwt - yayywwt.dll (file missing)
Close all windows and click "Fix selected"

Have you been in the Registry before? If not then do not continue. If so then....
Go to Start>Run> type Regedit
See if you can locate this key and delete it.
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\yayywwt
If it isn't there don't worry.

Let me know how things are now.

**Sideways52** · #26 2nd Sep 2007, 16:13

Well I uninstall'ed Uniblue and the yayywwt wasn't there. also fixed the HJT and uploaded another..

By the way,
Thanks for all your time I Appreciate it

**Sideways52** · #27 2nd Sep 2007, 16:33

::sigh:: While running Avast Through on my Local disk.

Win32:ChanCrypt was found

...system32/kdlzw.exe.vir

**evilfantasy** · #28 2nd Sep 2007, 16:38

Did it remove it?

**Sideways52** · #29 2nd Sep 2007, 16:40

no "moved to chest"

**evilfantasy** · #30 2nd Sep 2007, 16:44

Moved to chest is quarantine. Go to the chest select Infected Files and delete it there.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Need Help with Hijack Log	mpenney	Virus, Spyware & Security	2	26th Sep 2009 18:56
Hijack this log	carpious	Virus, Spyware & Security	17	28th Jun 2008 02:21
Hijack log	d0od	Virus, Spyware & Security	1	27th May 2008 09:30
Hijack log	madcows7	Virus, Spyware & Security	11	29th Feb 2008 20:34
Hijack this log	packofqtips	Virus, Spyware & Security	1	26th Dec 2007 17:57