need hjt log checked

Welcome to Majorgeeks!

Please attach the other three requested logs
- CounterSpy
- Bitdefender
- PandaActiveScan


Are you still having any malware problems?

 

You look to be in pretty good shape! I only see a few things we need to do and most are not malware.

First uninstall the Sunbelt CounterSpy trial since we are finished with it now! Then delete the below two folders left behind by the uninstall:
C:\Documents and Settings\Brad\Local Settings\Application Data\Sunbelt Software
C:\Program Files\Sunbelt Software

I don't know why you have the below in your Hosts file:
O1 - Hosts: 207.210.117.53 www.winmx.com

WinMx has not worked for a long time!

It also looks like you may have put a load of other stuff in your Hosts file which we do not recommend doing. I recommend you run the below program to restore your original default hosts file.

Download HOSTER and then follow the below steps.

• Unzip Hoster to a convenient folder such as C:\Hoster
• Run Hoster.exe, click Restore Microsoft's Hosts File and then click OK.
• Click the X to exit the program

Now locate the below file and delete it:
C:\WINDOWS\win32t4.dll

Now let's free up a load of hard disk space and get your Sun Java and Firefox versions up to date for better security!

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 5
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Mozilla Firefox (1.5)

Make sure you reboot after uninstalling the above!

After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

Then install the current version of FireFox from: Mozilla Firefox

Other than the above you are clean! If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
   • Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix you can delete the ComboFix.exe file and associated C:\combofix.txt log that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
5. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
6. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
7. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
8. If you are running Windows XP or Windows ME, do the below:
   • go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
9. After doing the above, you should work thru the below link:
   • How to Protect yourself from malware!

 

Not malware! It is a feature in some browsers to show embedded icons from websites. They can even showup like that in your Favorites. You can learn more about this by searching the web. Like some of the below:

http://www.chami.com/tips/Internet/110599I.html
http://www.chami.com/html-kit/services/favicon/

Read this which should explain it to you: http://www.gearsoftware.com/cfknowledgebase/articledisplay.cfm?articleid=52



You log is clean!

 

These have nothing to do with what you have done here. They are probably from you using a program named Antiyports at some point. In the future, you should avoid installing things to your Desktop. That is not where programs should be installed. The exception to this rule may be specialty tools used in removing malware, but we clean those up when finished. If you no longer use Antiyports then you should be able to delete the files. This is not malware!

NO! SpywareBlaster provides no realtime blocking. You need an application like Spyware Doctor but only the paid version of Spyware Doctor will block and also remove. The free trial version of Spyware Doctor is not that useful. Also you should still keep SpywareBlaster installed no matter what! It uses no system resources and does provide some protection.


If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
   • Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix you can delete the ComboFix.exe file and associated C:\combofix.txt log that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
5. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
6. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
7. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
8. If you are running Windows XP or Windows ME, do the below:
   • go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
9. After doing the above, you should work thru the below link:
   • How to Protect yourself from malware!

 

You're welcome. Surf Safely!