hijack this results help please

scrumdown · May 28, 2008

I have an malware problem, stops internet explorer opening, opens extra wndows when it does run, and keeps changing registry entries, help please

TimW · May 28, 2008

Welcome to Major Geeks!

Please re-run HJT and do a system scan only....and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mlJDvWMf.dll,#1
O4 - HKCU\..\Run: [MSServer] rundll32.exe.C:\Users\dave\AppData\Local\Temp\wvUoOETn.dll,#1
Click to expand...

After clicking Fix, exit HJT.

Now download The Avenger by Swandog469, and save it to your Desktop.
* Extract avenger.exe from the Zip file and save it to your desktop
* Run avenger.exe by double-clicking on it.
* Do not change any check box options!!
* Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

Files to delete:
C:\Users\dave\AppData\Local\Temp\wvUoOETn.dll
C:\Windows\system32\mlJDvWMf.dll
Click to expand...

* Now click the Execute button.
* Click Yes to the prompt to confirm you want to execute.
* Click Yes to the Reboot now? question that will appear when Avenger finishes running.
* Your PC should reboot, if not, reboot it yourself.
* A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

Now, please uninstall HJT as it will be properly installed when you do the following:

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

Log in or Sign up

hijack this results help please

scrumdown Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member