1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Please analyse my HJT log

Discussion in 'Virus & Other Malware Removal' started by ettk, Oct 3, 2003.

Thread Status:
Not open for further replies.
  1. ettk

    ettk Thread Starter

    Joined:
    Oct 3, 2003
    Messages:
    1
    Logfile of HijackThis v1.97.2
    Scan saved at 2:02:56 AM, on 04-Oct-03
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\System32\ZipToA.exe
    C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
    C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
    C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
    C:\Program Files\Winzip\WZQKPICK.EXE
    C:\WINDOWS\explorer.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\NAV2004\navapsvc.exe
    C:\Program Files\NAV2004\SAVScan.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Ernest and Kent\Local Settings\Temp\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    O1 - Hosts: 66.159.20.52 www1.ndhosting.com
    O1 - Hosts: 66.159.20.52 www3.ndhosting.com
    O1 - Hosts: 66.159.20.52 www2.ndhosting.com
    O1 - Hosts: 66.159.20.52 www.ndhosting.com
    O1 - Hosts: 66.159.20.52 www.kinghost.com
    O1 - Hosts: 66.159.20.52 kinghost.com
    O1 - Hosts: 66.159.20.52 www1.kinghost.com
    O1 - Hosts: 66.159.20.52 www2.kinghost.com
    O1 - Hosts: 66.159.20.52 www3.kinghost.com
    O1 - Hosts: 66.159.20.52 www4.kinghost.com
    O1 - Hosts: 66.159.20.52 www5.kinghost.com
    O1 - Hosts: 66.159.20.52 www6.kinghost.com
    O1 - Hosts: 66.159.20.52 www7.kinghost.com
    O1 - Hosts: 66.159.20.52 www8.kinghost.com
    O1 - Hosts: 66.159.20.52 www9.kinghost.com
    O1 - Hosts: 66.159.20.52 www10.kinghost.com
    O1 - Hosts: 66.159.20.52 www.smutserver.com
    O1 - Hosts: 66.159.20.52 smutserver.com
    O1 - Hosts: 66.159.20.52 www1.smutserver.com
    O1 - Hosts: 66.159.20.52 www2.smutserver.com
    O1 - Hosts: 66.159.20.52 www16.smutserver.com
    O1 - Hosts: 66.159.20.52 www3.smutserver.com
    O1 - Hosts: 66.159.20.52 www4.smutserver.com
    O1 - Hosts: 66.159.20.52 www5.smutserver.com
    O1 - Hosts: 66.159.20.52 www6.smutserver.com
    O1 - Hosts: 66.159.20.52 www7.smutserver.com
    O1 - Hosts: 66.159.20.52 www8.smutserver.com
    O1 - Hosts: 66.159.20.52 www9.smutserver.com
    O1 - Hosts: 66.159.20.52 www10.smutserver.com
    O1 - Hosts: 66.159.20.52 www11.smutserver.com
    O1 - Hosts: 66.159.20.52 www12.smutserver.com
    O1 - Hosts: 66.159.20.52 www13.smutserver.com
    O1 - Hosts: 66.159.20.52 www14.smutserver.com
    O1 - Hosts: 66.159.20.52 www15.smutserver.com
    O1 - Hosts: 66.159.20.52 www17.smutserver.com
    O1 - Hosts: 66.159.20.52 www18.smutserver.com
    O1 - Hosts: 66.159.20.52 www19.smutserver.com
    O1 - Hosts: 66.159.20.52 www20.smutserver.com
    O1 - Hosts: 66.159.20.52 www21.smutserver.com
    O1 - Hosts: 66.159.20.52 www22.smutserver.com
    O1 - Hosts: 66.159.20.52 www23.smutserver.com
    O1 - Hosts: 66.159.20.52 www24.smutserver.com
    O1 - Hosts: 66.159.20.52 www25.smutserver.com
    O1 - Hosts: 66.159.20.52 www26.smutserver.com
    O1 - Hosts: 66.159.20.52 www27.smutserver.com
    O1 - Hosts: 66.159.20.52 www28.smutserver.com
    O1 - Hosts: 66.159.20.52 www29.smutserver.com
    O1 - Hosts: 66.159.20.52 www30.smutserver.com
    O1 - Hosts: 66.159.20.52 www31.smutserver.com
    O1 - Hosts: 66.159.20.52 www32.smutserver.com
    O1 - Hosts: 66.159.20.52 agreathost.net
    O1 - Hosts: 66.159.20.52 www.agreathost.net
    O1 - Hosts: 66.159.20.52 hotfreehost.com
    O1 - Hosts: 66.159.20.52 www.hotfreehost.com
    O1 - Hosts: 66.159.20.52 greatfreehost.com
    O1 - Hosts: 66.159.20.52 www.greatfreehost.com
    O1 - Hosts: 66.159.20.52 freesmutpages.com
    O1 - Hosts: 66.159.20.52 www.freesmutpages.com
    O1 - Hosts: 66.159.20.52 apornhost.com
    O1 - Hosts: 66.159.20.52 www.apornhost.com
    O1 - Hosts: 66.159.20.52 nasty-pages.com
    O1 - Hosts: 66.159.20.52 www.nasty-pages.com
    O1 - Hosts: 66.159.20.52 sexyfreehost.com
    O1 - Hosts: 66.159.20.52 www.sexyfreehost.com
    O1 - Hosts: 66.159.20.52 x4web.com
    O1 - Hosts: 66.159.20.52 www.x4web.com
    O1 - Hosts: 66.159.20.52 sexplanets.com
    O1 - Hosts: 66.159.20.52 www.sexplanets.com
    O1 - Hosts: 66.159.20.52 maxismut.com
    O1 - Hosts: 66.159.20.52 www.maxismut.com
    O1 - Hosts: 66.159.20.52 tgpfriendly.com
    O1 - Hosts: 66.159.20.52 www.tgpfriendly.com
    O1 - Hosts: 66.159.20.52 tgp-server.com
    O1 - Hosts: 66.159.20.52 www.tgp-server.com
    O1 - Hosts: 66.159.20.52 magnaplza.com
    O1 - Hosts: 66.159.20.52 www.magnaplza.com
    O1 - Hosts: 66.159.20.52 free-xxx-server.com
    O1 - Hosts: 66.159.20.52 www.free-xxx-server.com
    O1 - Hosts: 66.159.20.52 libereco.net
    O1 - Hosts: 66.159.20.52 www.libereco.net
    O1 - Hosts: 66.159.20.52 0190-dialer.com
    O1 - Hosts: 66.159.20.52 www.0190-dialer.com
    O1 - Hosts: 66.159.20.52 xxxod.net
    O1 - Hosts: 66.159.20.52 www.xxxod.net
    O1 - Hosts: 66.159.20.52 altsights.com
    O1 - Hosts: 66.159.20.52 www.altsights.com
    O1 - Hosts: 66.159.20.52 adulthosting.com
    O1 - Hosts: 66.159.20.52 www.adulthosting.com
    O1 - Hosts: 66.159.20.52 superhova.com
    O1 - Hosts: 66.159.20.52 www.superhova.com
    O1 - Hosts: 66.159.20.52 bestpornhost.com
    O1 - Hosts: 66.159.20.52 www.bestpornhost.com
    O1 - Hosts: 66.159.20.52 hostingfree.com
    O1 - Hosts: 66.159.20.52 www.hostingfree.com
    O1 - Hosts: 66.159.20.52 xfreehosting.com
    O1 - Hosts: 66.159.20.52 www.xfreehosting.com
    O1 - Hosts: 66.159.20.52 blinghosting.com
    O1 - Hosts: 66.159.20.52 www.blinghosting.com
    O1 - Hosts: 66.159.20.52 x-x-x-hosting.com
    O1 - Hosts: 66.159.20.52 www.x-x-x-hosting.com
    O1 - Hosts: 66.159.20.52 pornparks.com
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\NAV2004\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\NAV2004\NavShExt.dll
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
    O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
    O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
    O4 - HKLM\..\Run: [XeroxScannerDaemon] C:\Program Files\Xerox\NWWia\XrxFTPLt.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ServiceLayer] C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
    O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
    O4 - HKLM\..\Run: [39760988.exe] C:\WINDOWS\System32\39760988.exe
    O4 - HKLM\..\Run: [Mirabilis ICQ] C:\Program Files\ICQ\ICQNet.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKCU\..\RunOnce: [ICQ] C:\Program Files\ICQ\ICQ.exe -trayboot
    O4 - Startup: PowerReg SchedulerV2.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Autostart.lnk = ?
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\Winzip\WZQKPICK.EXE
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 - Extra button: ICQ Pro (HKLM)
    O9 - Extra 'Tools' menuitem: ICQ (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Messenger (HKLM)
    O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
    O16 - DPF: {028518E1-9FA8-44FC-92D7-5C54244B5F36} - http://activex.microsoft.com/objects/ocget.dll
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Fun Web Products Installer Start) - http://imgfarm.com/images/nocache/funwebproducts/PopSwatterInitialSetup1.0.0.5.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/042edadc72a3dbc6ed17/netzip/RdxIE2.cab
    O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.can.com.sg/mwf/mgaxctrl.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://202.172.226.178/axiscam/dll/AxisCamControl.ocx
    O16 - DPF: {A4639D2F-774E-11D3-A490-00C04F6843FB} (IEAnimBehaviorFactory Class) - http://download.microsoft.com/download/vizact2000/Install/10/WIN98Me/EN-US/msorun.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
     
  2. e-liam

    e-liam

    Joined:
    Jun 19, 2003
    Messages:
    1,242
    Hi ettk, and welcome to TSG.. :)

    Please run a new Hijack log, and check to fix all of the items below. Next close all browser windows and click Fix checked

    O1 - Hosts: 66.159.20.52 www1.ndhosting.com

    O1 - Hosts: 66.159.20.52 www3.ndhosting.com

    O1 - Hosts: 66.159.20.52 www2.ndhosting.com

    O1 - Hosts: 66.159.20.52 www.ndhosting.com

    O1 - Hosts: 66.159.20.52 www.kinghost.com

    O1 - Hosts: 66.159.20.52 kinghost.com

    O1 - Hosts: 66.159.20.52 www1.kinghost.com

    O1 - Hosts: 66.159.20.52 www2.kinghost.com

    O1 - Hosts: 66.159.20.52 www3.kinghost.com

    O1 - Hosts: 66.159.20.52 www4.kinghost.com

    O1 - Hosts: 66.159.20.52 www5.kinghost.com

    O1 - Hosts: 66.159.20.52 www6.kinghost.com

    O1 - Hosts: 66.159.20.52 www7.kinghost.com

    O1 - Hosts: 66.159.20.52 www8.kinghost.com

    O1 - Hosts: 66.159.20.52 www9.kinghost.com

    O1 - Hosts: 66.159.20.52 www10.kinghost.com

    O1 - Hosts: 66.159.20.52 www.smutserver.com

    O1 - Hosts: 66.159.20.52 smutserver.com

    O1 - Hosts: 66.159.20.52 www1.smutserver.com

    O1 - Hosts: 66.159.20.52 www2.smutserver.com

    O1 - Hosts: 66.159.20.52 www16.smutserver.com

    O1 - Hosts: 66.159.20.52 www3.smutserver.com

    O1 - Hosts: 66.159.20.52 www4.smutserver.com

    O1 - Hosts: 66.159.20.52 www5.smutserver.com

    O1 - Hosts: 66.159.20.52 www6.smutserver.com

    O1 - Hosts: 66.159.20.52 www7.smutserver.com

    O1 - Hosts: 66.159.20.52 www8.smutserver.com

    O1 - Hosts: 66.159.20.52 www9.smutserver.com

    O1 - Hosts: 66.159.20.52 www10.smutserver.com

    O1 - Hosts: 66.159.20.52 www11.smutserver.com

    O1 - Hosts: 66.159.20.52 www12.smutserver.com

    O1 - Hosts: 66.159.20.52 www13.smutserver.com

    O1 - Hosts: 66.159.20.52 www14.smutserver.com

    O1 - Hosts: 66.159.20.52 www15.smutserver.com

    O1 - Hosts: 66.159.20.52 www17.smutserver.com

    O1 - Hosts: 66.159.20.52 www18.smutserver.com

    O1 - Hosts: 66.159.20.52 www19.smutserver.com

    O1 - Hosts: 66.159.20.52 www20.smutserver.com

    O1 - Hosts: 66.159.20.52 www21.smutserver.com

    O1 - Hosts: 66.159.20.52 www22.smutserver.com

    O1 - Hosts: 66.159.20.52 www23.smutserver.com

    O1 - Hosts: 66.159.20.52 www24.smutserver.com

    O1 - Hosts: 66.159.20.52 www25.smutserver.com

    O1 - Hosts: 66.159.20.52 www26.smutserver.com

    O1 - Hosts: 66.159.20.52 www27.smutserver.com

    O1 - Hosts: 66.159.20.52 www28.smutserver.com

    O1 - Hosts: 66.159.20.52 www29.smutserver.com

    O1 - Hosts: 66.159.20.52 www30.smutserver.com

    O1 - Hosts: 66.159.20.52 www31.smutserver.com

    O1 - Hosts: 66.159.20.52 www32.smutserver.com

    O1 - Hosts: 66.159.20.52 agreathost.net

    O1 - Hosts: 66.159.20.52 www.agreathost.net

    O1 - Hosts: 66.159.20.52 hotfreehost.com

    O1 - Hosts: 66.159.20.52 www.hotfreehost.com

    O1 - Hosts: 66.159.20.52 greatfreehost.com

    O1 - Hosts: 66.159.20.52 www.greatfreehost.com

    O1 - Hosts: 66.159.20.52 freesmutpages.com

    O1 - Hosts: 66.159.20.52 www.freesmutpages.com

    O1 - Hosts: 66.159.20.52 apornhost.com

    O1 - Hosts: 66.159.20.52 www.apornhost.com

    O1 - Hosts: 66.159.20.52 nasty-pages.com

    O1 - Hosts: 66.159.20.52 www.nasty-pages.com

    O1 - Hosts: 66.159.20.52 sexyfreehost.com

    O1 - Hosts: 66.159.20.52 www.sexyfreehost.com

    O1 - Hosts: 66.159.20.52 x4web.com

    O1 - Hosts: 66.159.20.52 www.x4web.com

    O1 - Hosts: 66.159.20.52 sexplanets.com

    O1 - Hosts: 66.159.20.52 www.sexplanets.com

    O1 - Hosts: 66.159.20.52 maxismut.com

    O1 - Hosts: 66.159.20.52 www.maxismut.com

    O1 - Hosts: 66.159.20.52 tgpfriendly.com

    O1 - Hosts: 66.159.20.52 www.tgpfriendly.com

    O1 - Hosts: 66.159.20.52 tgp-server.com

    O1 - Hosts: 66.159.20.52 www.tgp-server.com

    O1 - Hosts: 66.159.20.52 magnaplza.com

    O1 - Hosts: 66.159.20.52 www.magnaplza.com

    O1 - Hosts: 66.159.20.52 free-xxx-server.com

    O1 - Hosts: 66.159.20.52 www.free-xxx-server.com

    O1 - Hosts: 66.159.20.52 libereco.net

    O1 - Hosts: 66.159.20.52 www.libereco.net

    O1 - Hosts: 66.159.20.52 0190-dialer.com

    O1 - Hosts: 66.159.20.52 www.0190-dialer.com

    O1 - Hosts: 66.159.20.52 xxxod.net

    O1 - Hosts: 66.159.20.52 www.xxxod.net

    O1 - Hosts: 66.159.20.52 altsights.com

    O1 - Hosts: 66.159.20.52 www.altsights.com

    O1 - Hosts: 66.159.20.52 adulthosting.com

    O1 - Hosts: 66.159.20.52 www.adulthosting.com

    O1 - Hosts: 66.159.20.52 superhova.com

    O1 - Hosts: 66.159.20.52 www.superhova.com

    O1 - Hosts: 66.159.20.52 bestpornhost.com

    O1 - Hosts: 66.159.20.52 www.bestpornhost.com

    O1 - Hosts: 66.159.20.52 hostingfree.com

    O1 - Hosts: 66.159.20.52 www.hostingfree.com

    O1 - Hosts: 66.159.20.52 xfreehosting.com

    O1 - Hosts: 66.159.20.52 www.xfreehosting.com

    O1 - Hosts: 66.159.20.52 blinghosting.com

    O1 - Hosts: 66.159.20.52 www.blinghosting.com

    O1 - Hosts: 66.159.20.52 x-x-x-hosting.com

    O1 - Hosts: 66.159.20.52 www.x-x-x-hosting.com

    O1 - Hosts: 66.159.20.52 pornparks.com


    That's every 01 entry, to save you checking.. :)

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [39760988.exe] C:\WINDOWS\System32\39760988.exe

    O4 - Global Startup: Autostart.lnk = ?

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Fun Web Products Installer Start) - http://imgfarm.com/images/nocache/f...etup1.0.0.5.cab

    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/042edadc72a3db...tzip/RdxIE2.cab


    Then if you could please reboot, then download Spybot - Search & Destroy, from www.tomcoyote.org/spybot : if you haven't already got the program.

    Now press Settings, and Settings again. Go to the Webupdate section, and check "Display also available beta versions".

    Now press Online, and search for, put a check mark at, and install all updates.

    Next, close all Internet Explorer windows, hit 'Check for Problems', and have SpyBot remove all it finds marked RED.

    Finally, reboot and post a new log to check it's all gone.

    Cheers

    Liam
     
  3. winchester73

    winchester73

    Joined:
    Aug 18, 2003
    Messages:
    2,438
    You could also download Ad-Aware 6 and have it do a thorough cleaning of your unwanted files.

    Go here for the free Ad-Aware 6 Personal Build 181: http://www.lavasoft.de/support/download/

    Launch the program ... on the start-up screen, you will need to first run the Webupdate Feature (globe at the top), or click "check for updates" to get the Reference File up to date.

    Please use the Custom Scan with Memory and Both registry scans ON. Also.... make sure that you activate IN-DEPTH scanning before you proceed.

    Then see that you have these options checked:
    Under Ad-Aware 6 Settings, Tweaks, Scanning Engine:
    "Unload recognized processes during scanning."
    Under Ad-Aware 6 Settings, Tweaks, Cleaning Engine:
    "Automatically try to unregister objects prior to deletion."
    "Let Windows remove files in use after reboot."

    Next ...

    Run Ad-Aware 6.
    Mark the objects you wish to eliminate for removal. There are many options available with a right-click.
    Make a Quarantine only if you do not have the Auto-Quarantine option ON.
    Then choose "Next" to remove the chosen objects.
    Finally ... Reboot

    Please read http://forums.techguy.org/t164245/s.html for further instructions, settings , etc.

    Once you are cleaned up, you might want to visit http://www.wilderssecurity.net/index.html and download the following:

    SpywareBlaster v2.6.1
    SpywareGuard v2.2

    These will prevent Active-X drive-by installations, as well as provide real-time browser hijacking protection.

    Lastly, consider installing IE-SPYAD, a registry file that adds a long list of known crapware to the Restricted Sites of your Internet Explorer: http://www.staff.uiuc.edu/~ehowes/resource.htm
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/169285

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice