![]() |
IOBit Software
|
|
|
||||||
| Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient. |
![]() |
|
|
Thread Tools | Display Modes |
|
#1
|
|||
|
|||
|
Hi,I followed the instructions in that thread,like using those spyware and virus programs,but i still suspect i have some spyware on my computer.
Here is my Hijackthis log... |
| Sponsored links |
|
|
|
#2
|
||||
|
||||
|
You need to choose between AVG & Norton. Pick the one you want to keep and uninstall one because running two will cause conflicts.
First: Download LSP-Fix After download is complete, Run LSP-Fix Check the Box labeled "I know what I'm doing" and then click on the xfire_lsp_11078.dll file (in the “Keep” section) to select it. Then, Select the >> button to move xfire_lsp_11078.dll into the Remove section. Now, click the Finish Button. When the Repair Summary box appears, click OK. (Note: If the file xfire_lsp_11078.dll is already in the remove section, then just click FINISH.) Second: Please update to Hijack This 1.99.1 and attach a new log using the new version. After doing the above, reboot and post a new HJT log. |
|
#3
|
|||
|
|||
|
Ok,here it is...
|
|
#4
|
||||
|
||||
|
Please look in Add or Remove Programs for the following and Uninstall them if found:
Kazaa Lite <-- Its up to you whether you want to keep this or not but let me remind you, ALL P2P contain spyware and can contain viruses. Note: If you decide to keep this, ignore it thru this post! Scan with HijackThis and Check the Boxes for the following: Make sure All Browser Windows are Closed when you Click FIX. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing) O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing) O4 - HKLM\..\Run: [KAZAA] "C:\Program Files\Kazaa Lite\kpp.exe" "C:\Program Files\Kazaa Lite\kazaalite.kpp" /SYSTRAY O4 - HKCU\..\Run: [FreeRAM XP] "C:\DOCUME~1\ROBKLO~1\LOCALS~1\Temp\Rar$EX00.157\FreeRAM XP Pro 1.40.exe" -win O4 - Startup: Reboot.exe O4 - Global Startup: Reboot.exe O16 - DPF: {5DB05CB8-7751-469D-A1DD-45C8C201C013} (Blender 3D Plug-in Active X Control) - http://download.blender.org/release/...er3DPlugin.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab Again, make sure All Browser Windows are Closed when you Click FIX. NOW: Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain: C:\Program Files\Kazaa Lite ←–– Delete this whole folder! C:\Documents and Settings\ROBKLO~1\Local Settings\Temp\Rar$EX00.157\FreeRAM XP Pro 1.40.exe Reboot.exe ←–– Search for this file and delete when found! NEXT: Run CCleaner and Spybot S&D and have Spybot fix what it finds. Note: Dont forget to update Spybot S&D by selecting "Search For Updates" Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked: Temporary Files Temporary Internet Files Recycle Bin And Click OK. Reboot to Normal Windows , Scan with HijackThis and attach the new log. Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now. Good Luck! ![]() |
|
#5
|
|||
|
|||
|
Hey
there was only one "O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing)" But I guess you put it twice by accident,and I couldn't find "reboot.exe" i searched everywhere. I did find "reboot.lgc" however,I didn't do anything to it. By the way,I'm clicking "manage attatchments" and it's not doing anything,so I can't post an updated log yet...I'm going to bed now,so I won't respond for a bit. |
| Sponsored links |
|
|
|
#6
|
||||
|
||||
|
Quote:
If you still cant upload a new log, then paste the log inline and I will have it converted for you. |
|
#7
|
|||
|
|||
|
Sorry I have to do this,but whenever I click manage attachments,nothing happens.Here's the log...
Edit by chaslang: Inline log attached! Please explain exactly what happens when you click Manage Attachments. Last edited by chaslang; 04-02-05 at 15:57.. |
|
#8
|
||||
|
||||
|
Have HJT fix these 2 entries, be sure all browsers are closed.
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yah...utocomplete.cab Are you having any further problems? |
![]() |
| Thread Tools | |
| Display Modes | |
|
|