![]() |
|
|||||||
|
|
|
|
|
|
my brother disconnected to connected it to the laptop. afterwards , when he connected it to the original pc.....my desktop, the speed is really starting to suck .......i dont know . the download which usually happened at aroun 14 kb now happens at max.4kb . like for example, facebook which ...
|
![]() |
|
|
Thread Tools |
|
#1
|
|||
|
|||
|
my brother disconnected to connected it to the laptop. afterwards , when he connected it to the original pc.....my desktop, the speed is really starting to suck .......i dont know . the download which usually happened at aroun 14 kb now happens at max.4kb . like for example, facebook which opens fine before, now kinda gets hung up for a long time in opening something .
I am posting my hijack log just in case . Please help . heres my speed test i have 128 speed ........dont know if its in mega or kilo.......but i think its most probably the latter . http://www.speedtest.net/result/381473298.png Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:58:15 AM, on 12/31/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\csrss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE D:\WINDOWS\system32\slserv.exe D:\WINDOWS\system32\wdfmgr.exe D:\WINDOWS\system32\wscntfy.exe D:\WINDOWS\system32\taskmgr.exe D:\Program Files\Ares\Ares.exe D:\WINDOWS\explorer.exe E:\ALL THE SOFTWARES\HiJackThis.exe D:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG:system.ini: Shell=explorer.exe O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - D:\Program Files\DAP\DAPBHO.dll O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - D:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file) O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - D:\Program Files\AskBarDis\bar\bin\askBar.dll O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [googletalk] D:\Program Files\Google\Google Talk\googletalk.exe /autostart O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [BitTorrent DNA] "D:\Program Files\DNA\btdna.exe" O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm O8 - Extra context menu item: Download all links with IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download FLV video content with IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Download with IDM - D:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1222679603245 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Program Files\Ares\chatServer.exe O23 - Service: Distributed - Unknown owner - D:\Program Files\Common Files\Microsoft Shared\MSINFO\ServerNet.exe (file missing) O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 6000 bytes |
|
#2
|
|||
|
|||
|
Download Malwarebytes' Anti-Malware (MBAM)
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. ---------- Download random's system information tool (RSIT) by random/random from and save it to your Desktop.
|
|
#3
|
|||
|
|||
|
Logfile of random's system information tool 1.05 (written by random/random)
Run by Burhan at 2009-01-01 23:01:39 Microsoft Windows XP Professional Service Pack 2 System drive D: has 1 GB (16%) free of 10 GB Total RAM: 126 MB (17% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:01:43 PM, on 1/1/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\csrss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\system32\wdfmgr.exe D:\WINDOWS\System32\alg.exe D:\WINDOWS\system32\wscntfy.exe D:\WINDOWS\system32\taskmgr.exe D:\WINDOWS\system32\wbem\wmiprvse.exe D:\WINDOWS\explorer.exe D:\Documents and Settings\Burhan\Desktop\RSIT.exe E:\ALL THE SOFTWARES\Burhan.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG:system.ini: Shell=explorer.exe O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - D:\Program Files\DAP\DAPBHO.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file) O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [googletalk] D:\Program Files\Google\Google Talk\googletalk.exe /autostart O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [BitTorrent DNA] "D:\Program Files\DNA\btdna.exe" O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1222679603245 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Program Files\Ares\chatServer.exe O23 - Service: Distributed - Unknown owner - D:\Program Files\Common Files\Microsoft Shared\MSINFO\ServerNet.exe (file missing) O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 4970 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{0000CC75-ACF3-4cac-A0A9-DD3868E06852}] DAPHelper Class - D:\Program Files\DAP\DAPBHO.dll [2007-11-27 98304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}] Skype add-on (mastermind) - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-05-30 1410344] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {DE9C389F-3316-41A7-809B-AA305ED9D922} [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run] "QuickTime Task"=D:\Program Files\QuickTime\qttask.exe [2006-09-01 282624] "googletalk"=D:\Program Files\Google\Google Talk\googletalk.exe [2007-01-02 3739648] "SunJavaUpdateSched"=D:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784] [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run] "ctfmon.exe"=D:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360] "BitTorrent DNA"=D:\Program Files\DNA\btdna.exe [2008-12-30 342848] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTAVApp] D:\Program Files\PC Tools AntiVirus\PCTAV.exe [2008-09-25 1370000] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon] D:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-07-23 352256] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SBCSSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\PCTAVSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\SBCSSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\explorer] "NoDrives"=0 "NoDriveAutoRun"=FFFFFFFF "NoDriveTypeAutoRun"=36 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\explorer] "NoDriveTypeAutoRun"= "NoDrives"= "NoDriveAutoRun"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32 \sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\Program Files\Ares\Ares.exe"="D:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows" "D:\Program Files\NetMeeting\conf.exe"="D:\Program Files\NetMeeting\conf.exe:*:Enabled:Windows® NetMeeting®" "D:\Program Files\Opera\Opera.exe"="D:\Program Files\Opera\Opera.exe:*:Enabled:Opera Internet Browser" "D:\Program Files\Google\Google Talk\googletalk.exe"="D:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk" "D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="D:\Pro gram Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enable d:Yahoo! Messenger" "D:\Program Files\Yahoo!\Messenger\YServer.exe"="D:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo ! FT Server" "D:\Program Files\AIM6\aim6.exe"="D:\Program Files\AIM6\aim6.exe:*:Enabled:AIM" "D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "D:\Program Files\Trillian\trillian.exe"="D:\Program Files\Trillian\trillian.exe:*:Enabled:Trillian" "D:\Program Files\Miranda IM\miranda32.exe"="D:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM" "D:\Program Files\LimeWire\LimeWire.exe"="D:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" "D:\Program Files\MSN Messenger\msnmsgr.exe"="D:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "D:\Program Files\MSN Messenger\livecall.exe"="D:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "D:\Program Files\DNA\btdna.exe"="D:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "D:\Program Files\BitTorrent\bittorrent.exe"="D:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorre nt" [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32 \sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\Program Files\MSN Messenger\msncall.exe"="D:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "D:\Program Files\MSN Messenger\msnmsgr.exe"="D:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "D:\Program Files\MSN Messenger\livecall.exe"="D:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{dafa2220-8123-11dd-aa9c-00065b298742}] shell\AutoRun\command - G:\CONFIG\S-1-5-21-1482476501-1644491937-682003330-1013\Cfg.exe shell\open\command - G:\CONFIG\S-1-5-21-1482476501-1644491937-682003330-1013\Cfg.exe ======List of files/folders created in the last 1 months====== 2009-01-01 20:51:34 ----SHD---- D:\FOUND.174 2008-12-31 19:12:10 ----SHD---- D:\FOUND.173 2008-12-30 23:08:48 ----SHD---- D:\FOUND.172 2008-12-30 18:53:42 ----SHD---- D:\FOUND.171 2008-12-30 16:16:01 ----D---- D:\Documents and Settings\Burhan\Application Data\BitTorrent 2008-12-30 16:15:44 ----D---- D:\Program Files\DNA 2008-12-30 16:15:44 ----D---- D:\Program Files\BitTorrent 2008-12-30 16:15:44 ----D---- D:\Documents and Settings\Burhan\Application Data\DNA 2008-12-30 14:46:46 ----SHD---- D:\FOUND.170 2008-12-29 23:24:22 ----SHD---- D:\FOUND.169 2008-12-29 15:06:17 ----D---- D:\Documents and Settings\Burhan\Application Data\IDM 2008-12-29 13:39:04 ----SHD---- D:\FOUND.168 2008-12-28 05:25:52 ----D---- D:\Program Files\IrfanView 2008-12-26 22:39:46 ----SHD---- D:\FOUND.167 2008-12-26 15:36:18 ----SHD---- D:\FOUND.166 2008-12-26 12:37:24 ----SHD---- D:\FOUND.165 2008-12-25 21:19:38 ----SHD---- D:\FOUND.164 2008-12-20 14:47:41 ----D---- D:\Program Files\HyCam2 2008-12-20 12:02:48 ----D---- D:\Program Files\Frets on Fire 2008-12-20 09:54:02 ----SHD---- D:\FOUND.163 2008-12-17 11:38:48 ----SHD---- D:\FOUND.162 2008-12-15 23:31:13 ----D---- D:\Documents and Settings\Burhan\Application Data\LimeWire 2008-12-15 23:03:16 ----SHD---- D:\FOUND.161 2008-12-15 16:52:14 ----SHD---- D:\FOUND.160 2008-12-13 13:47:12 ----SHD---- D:\FOUND.159 2008-12-10 21:05:58 ----SHD---- D:\FOUND.158 2008-12-09 23:27:12 ----D---- D:\Documents and Settings\Burhan\Application Data\J River 2008-12-09 13:10:10 ----D---- D:\Program Files\Common Files\NSV 2008-12-06 05:52:44 ----SHD---- D:\FOUND.157 2008-12-06 01:43:41 ----N---- D:\WINDOWS\system32\vxblock.dll 2008-12-06 01:43:41 ----N---- D:\WINDOWS\system32\pxwave.dll 2008-12-06 01:43:41 ----N---- D:\WINDOWS\system32\pxmas.dll 2008-12-06 01:43:41 ----N---- D:\WINDOWS\system32\pxhpinst.exe 2008-12-06 01:43:41 ----N---- D:\WINDOWS\system32\pxdrv.dll 2008-12-06 01:43:40 ----N---- D:\WINDOWS\system32\px.dll 2008-12-06 01:43:14 ----D---- D:\Program Files\Winamp 2008-12-06 01:43:14 ----A---- D:\WINDOWS\winamp.ini 2008-12-05 14:40:22 ----D---- D:\Documents and Settings\Burhan\Application Data\Netscape 2008-12-05 14:39:56 ----D---- D:\Program Files\Netscape 2008-12-04 17:34:26 ----SHD---- D:\FOUND.156 2008-12-04 08:55:46 ----SHD---- D:\FOUND.155 2008-12-02 22:24:47 ----D---- D:\Documents and Settings\Burhan\Application Data\InstallShield ======List of files/folders modified in the last 1 months====== 2008-12-31 05:00:54 ----N---- D:\WINDOWS\SchedLgU.Txt 2008-12-24 22:49:44 ----A---- D:\WINDOWS\ModemLog_Smart Link 56K Voice Modem.txt ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 P3;Intel PentiumIII Processor Driver; D:\WINDOWS\system32\DRIVERS\p3.sys [2004-08-03 42496] R1 SASDIFSV;SASDIFSV; \??\D:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [] R1 SASKUTIL;SASKUTIL; \??\D:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; D:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-23 12032] R2 AVFilter;AVFilter; D:\WINDOWS\system32\drivers\AVFilter.sys [2008-02-12 21904] R2 dmsmbios;dmsmbios; \??\D:\WINDOWS\system32\dmsmbios.sys [] R3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); D:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256] R3 AVHook;AVHook; D:\WINDOWS\system32\drivers\AVHook.sys [2007-12-06 28568] R3 AVRec;AVRec; D:\WINDOWS\system32\drivers\AVRec.sys [2007-12-06 21912] R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; D:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591] R3 i81x;i81x; D:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020] R3 MODEMCSA;Unimodem Streaming Filter Device; D:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] R3 Mtlmnt5;Mtlmnt5; D:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2004-08-03 126686] R3 Slntamr;Smart Link 56K Modem Driver; D:\WINDOWS\system32\DRIVERS\slntamr.sys [2004-08-03 404990] R3 SlWdmSup;SlWdmSup; D:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2004-08-03 13240] R3 usbhub;USB2 Enabled Hub; D:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; D:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480] S1 b88b9e8e;b88b9e8e; D:\WINDOWS\System32\drivers\b88b9e8e.sys [2008-08-05 109150] S3 AvFlt;Antivirus Filter Driver; D:\WINDOWS\system32\drivers\av5flt.sys [] S3 CCDECODE;Closed Caption Decoder; D:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024] S3 iAimFP0;iAimFP0; D:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415] S3 iAimFP1;iAimFP1; D:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127] S3 iAimFP2;iAimFP2; D:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775] S3 iAimFP3;iAimFP3; D:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063] S3 iAimFP4;iAimFP4; D:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455] S3 iAimFP5;iAimFP5; D:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807] S3 iAimFP6;iAimFP6; D:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295] S3 iAimFP7;iAimFP7; D:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871] S3 iAimTV0;iAimTV0; D:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311] S3 iAimTV1;iAimTV1; D:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551] S3 iAimTV3;iAimTV3; D:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599] S3 iAimTV4;iAimTV4; D:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615] S3 iAimTV5;iAimTV5; D:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471] S3 iAimTV6;iAimTV6; D:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271] S3 MBAMSwissArmy;MBAMSwissArmy; \??\D:\WINDOWS\system32\drivers\mbamswissarmy.sys [] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; D:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 Mtlstrm;Mtlstrm; D:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2004-08-03 1309184] S3 NABTSFEC;NABTS/FEC VBI Codec; D:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376] S3 NdisIP;Microsoft TV/Video Connection; D:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880] S3 nmwcd;Nokia USB Phone Parent; D:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216] S3 nmwcdc;Nokia USB Generic; D:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320] S3 nmwcdcj;Nokia USB Port; D:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288] S3 nmwcdcm;Nokia USB Modem; D:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288] S3 NtMtlFax;NtMtlFax; D:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2004-08-03 180360] S3 SASENUM;SASENUM; \??\D:\Program Files\SUPERAntiSpyware\SASENUM.SYS [] S3 SBRE;SBRE; \??\D:\WINDOWS\system32\drivers\SBREdrv.sys [] S3 SLIP;BDA Slip De-Framer; D:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136] S3 SlNtHal;SlNtHal; D:\WINDOWS\system32\DRIVERS\Slnthal.sys [2004-08-03 95424] S3 streamip;BDA IPSink; D:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360] S3 usbprint;Microsoft USB PRINTER Class; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] S3 USBSTOR;USB Mass Storage Driver; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 WpdUsb;WpdUsb; D:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944] S3 WSTCODEC;World Standard Teletext Codec; D:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328] S3 XIRLINK;IBM PC Camera; D:\WINDOWS\system32\DRIVERS\C-itnt.sys [1999-10-19 435655] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 MDM;Machine Debug Manager; D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120] R2 UMWdf;Windows User Mode Driver Framework; D:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912] S2 Distributed;Distributed; D:\Program Files\Common Files\Microsoft Shared\MSINFO\ServerNet.exe [] S2 PCTAVSvc;PC Tools AntiVirus Engine; D:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe [2008-09-23 995520] S2 SLService;SmartLinkService; D:\WINDOWS\system32\slserv.exe [2004-08-04 73796] S3 AresChatServer;Ares Chatroom server; D:\Program Files\Ares\chatServer.exe [2007-03-20 263168] S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe [2005-09-23 66240] S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 ServiceLayer;ServiceLayer; D:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544] S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; D:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136] S3 WLSetupSvc;Windows Live Setup Service; D:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] -----------------EOF----------------- |
|
#4
|
|||
|
|||
|
info.txt logfile of random's system information tool 1.02 2008-09-26 23:02:40
======Uninstall list====== -->D:\WINDOWS\IsUninst.exe -f"D:\Program Files\IbmPcCamera\Uninst.isu" -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:\WINDOWS\INF\PCHealth.inf ACDSee-->D:\PROGRA~1\ACDSYS~1\ACDSEE\UNWISE.EXE D:\PROGRA~1\ACDSYS~1\ACDSEE\INSTALL.LOG Adobe Flash Player ActiveX-->D:\WINDOWS\system32\Macromed\Flash\uninstall_acti veX.exe Adobe Flash Player Plugin-->D:\WINDOWS\system32\Macromed\Flash\uninstall_plug in.exe AIM 6-->D:\Program Files\AIM6\uninst.exe Ares 2.0.9-->"D:\Program Files\Ares\uninstall.exe" Astro123 v1.40-->"D:\Program Files\Astro123\unins000.exe" Axialis AX-Icons 4.5-->D:\Program Files\Axialis\AX-Icons\UnInstall.exe "AX-Icons 4.5" "AXIcons.exe" CCleaner (remove only)-->"D:\Program Files\CCleaner\uninst.exe" CDisplay 1.8-->"D:\Program Files\CDisplay\unins000.exe" Download Accelerator Plus -->D:\PROGRA~1\DAP\UNWISE.EXE D:\PROGRA~1\DAP\INSTALL.LOG ESET Online Scanner-->D:\WINDOWS\system32\OnlineScannerUninstaller.ex e ffdshow [rev 2019] [2008-06-22]-->"D:\Program Files\ffdshow\unins000.exe" Flash Studio PRO Trial-->"D:\Program Files\Flash Studio PRO Trial\unins000.exe" FLV Player 2.0, build 24-->C:\Program Files\FLV Player\uninst.exe Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe Glary Registry Repair 2.9-->"D:\Program Files\Glary Registry Repair\unins000.exe" Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3} Google Talk (remove only)-->"D:\Program Files\Google\Google Talk\uninstall.exe" Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29} Google Toolbar for Internet Explorer-->regsvr32 /u /s "d:\program files\google\googletoolbar2.dll" HijackThis 2.0.2-->"D:\Documents and Settings\Burhan\My Documents\ALL THE SOFTWARES\HijackThis.exe" /uninstall Hotfix for Windows XP (KB915865)-->"D:\WINDOWS\$NtUninstallKB915865$\spuninst\spunin st.exe" Internet Download Manager-->D:\Program Files\Internet Download Manager\Uninstall.exe Malwarebytes' Anti-Malware-->"D:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Microsoft National Language Support Downlevel APIs-->"D:\WINDOWS\$NtServicePackUninstallNLSDownlevelMa pping$\spuninst\spuninst.exe" Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{90840409-6000-11D3-8CFE-0150048383C9} Microsoft Office XP Professional with FrontPage-->MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9} Microsoft Visual Basic 6.0 Enterprise Edition-->"D:\Program Files\Microsoft Visual Studio\VB98\Setup\1033\Setup.exe" Microsoft Web Publishing Wizard 1.53-->RunDll32 ADVPACK.DLL,LaunchINFSection D:\WINDOWS\INF\wpie3x86.inf,WebPostUninstall Mobysaurus Thesaurus-->"D:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>D:\WINDOWS\system32\SpoonUninstall-Mobysaurus Thesaurus.dat Nokia Connectivity Cable Driver-->MsiExec.exe /X{11964613-805F-432D-A12B-169554B793E7} Nokia Multimedia Player-->D:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\I Driver.exe /M{4D6183C0-005C-4B1F-8261-4B0F71F1C4A5} Nokia PC Suite-->D:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Nokia_PC_Suite_6_84_10_3_EA.exe Nokia PC Suite-->MsiExec.exe /I{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72} Opera 9.51-->MsiExec.exe /X{179624B1-2683-45ED-965A-B72189EB5820} PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF} PowerDVD-->RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8} RichFX Player-->RunDll32 D:\PROGRA~1\COMMON~1\RichFX\npvpg004.dll,Uninstall _Player Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} TIMES Education - A Level Physics-->D:\WINDOWS\uninst.exe -f"D:\Program Files\TIMES Education\A Level\Physics\DeIsL2.isu" -cD:\PROGRA~1\TIMESE~1\ALEVEL~1\Physics\_ISREG32.DL L TZ Connection Booster 2.6-->"D:\Program Files\TZ Connection Booster\unins000.exe" USB Drive AntiVirus 2.3-->"D:\Program Files\USBAntiVirus\unins000.exe" Viewpoint Media Player-->D:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u Windows Driver Package - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0)-->D:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u D:\WINDOWS\system32\DRVSTORE\pccswpddri_044C8712DB 44F83D9DE6C376991EE9254E0A69E4\pccswpddriver.inf Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->D:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u D:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC7291 8CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->D:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u D:\WINDOWS\system32\DRVSTORE\pccs_bluet_F12A08B6F7 76984A95553486F64C541356F86E38\pccs_bluetooth.inf Windows Driver Package - Nokia Modem (05/24/2007 6.84.0.1)-->D:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u D:\WINDOWS\system32\DRVSTORE\nokbtmdm_5E1541AFF1E1 EA3554CE566743CCAD323ED1C108\nokbtmdm.inf Windows Installer 3.1 (KB893803)-->"D:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\ spuninst.exe" Windows Live installer-->MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320} Windows Live Messenger-->MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F} Windows Media Format Runtime-->"D:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Player 10-->"D:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall WinRAR archiver-->D:\Program Files\WinRAR\uninstall.exe Yahoo! Messenger-->D:\PROGRA~1\YAHOO!\MESSEN~1\UNWISE.EXE /U D:\PROGRA~1\YAHOO!\MESSEN~1\INSTALL.LOG ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemr oot%\system32\wbem;D:\Program Files\PC Connectivity Solution;D:\PROGRAM FILES\QUICKTIME\QTSYSTEM "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 10, GenuineIntel "PROCESSOR_REVISION"=080a "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;. WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;D:\Program Files\QuickTime\QTSystem\QTJava.zip "QTJAVA"=D:\Program Files\QuickTime\QTSystem\QTJava.zip -----------------EOF----------------- |
|
#5
|
|||
|
|||
|
Malwarebytes' Anti-Malware 1.28
Database version: 1234 Windows 5.1.2600 Service Pack 2 12/31/2008 6:04:35 AM mbam-log-2008-12-31 (06-04-35).txt Scan type: Full Scan (D:\|) Objects scanned: 107121 Time elapsed: 24 minute(s), 0 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 2 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\AppID\{bdbebf18-7615-4971-9ac3-bd6ffb7ad6c1} (Adware.WebDir) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\DLP.DLL (Trojan.BHO) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) |
|
#6
|
|||
|
|||
|
Open HijackThis and select Do a system scan only.
Place a check mark next to the following entries: (if there) F2 - REG:system.ini: Shell=explorer.exe Important: Close all open windows except for HijackThis and then click Fix checked. Once completed, exit HijackThis. ---------- Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop. Link #1 Link #2 **Note: It is important that it is saved directly to your Desktop DO NOT run it yet! Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system Delete these files/folders, as follows: 1. Go to Start > Run > type Notepad.exe and click OK to open Notepad. It must be Notepad, not Wordpad. 2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C Code:
KillAll::
File::
D:\FOUND.174
D:\FOUND.173
D:\FOUND.172
D:\FOUND.171
D:\FOUND.170
D:\FOUND.169
D:\FOUND.168
D:\FOUND.167
D:\FOUND.166
D:\FOUND.165
D:\FOUND.164
D:\FOUND.163
D:\FOUND.162
D:\FOUND.161
D:\FOUND.160
D:\FOUND.159
D:\FOUND.158
D:\FOUND.157
D:\FOUND.156
D:\FOUND.155
Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]{DE9C389F-3316-41A7-809B-AA305ED9D922}
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dafa2220-8123-11dd-aa9c-00065b298742}]
4. Then click File > Save 5. Name the file CFScript.txt - Save the file to your Desktop 6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully! ![]() ComboFix will begin to execute, just follow the prompts. After reboot (in case it asks to reboot), it will produce a log for you. Post that log (Combofix.txt) in your next reply. Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze |
![]() |
|
| Bookmarks |
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Cannot connect to internet in Vista, Ubuntu is fine | darshpreet | Networking, Modems & VoIP | 0 | 7th Jun 2009 04:35 |
| Slow internet- Upload speed 4 times faster than download | palmermcfc | Networking, Modems & VoIP | 12 | 31st May 2009 21:46 |
| Real CPUs Bus Speed Wrong - Intel Pentium Dual Core E2200 | Nikronius | CPUs, Motherboards & RAM | 3 | 10th May 2009 23:10 |
| Computer running slow, was fine previously, HJT Log inside | computernoob64 | Virus, Spyware & Security | 43 | 22nd Feb 2009 21:34 |
| Laptop connection speed slow | Poeticsoul44 | Networking, Modems & VoIP | 13 | 25th Jan 2009 14:03 |
| Thread Tools | |
|
|