What the Tech logo
Welcome! Register for a free account (or login) > How does it work?
  1. Quickly register. It will only take 60 seconds.
  2. Start a new topic. Ask your question. Wait for an email reply.
  3. Is your system infected? Begin reading the malware removal guide.
register button
 
Closed TopicStart new topic
> [Closed] removing riyo codec
shanepie
post Nov 27 2007, 02:33 AM
Post #1


New Member
*

Group: New Member
Posts: 1
Joined: 27-November 07
Member No.: 74,693
Operating System: windows XP



Username "Admin" - 11/27/2007 19:08:09 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

Successfully flushed the DNS Resolver Cache.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"Power_Gear"="C:\\Program Files\\ASUS\\Power4 Gear\\BatteryLife.exe 1"
"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"Zshutdown"="c:\\sysprep\\patch\\sysprep.cmd"
"Alcmtr"="ALCMTR.EXE"
"RTHDCPL"="RTHDCPL.EXE"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe\""
"Wireless Console"="C:\\Program Files\\ASUS\\Wireless Console\\wcourier.exe"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"DXDllRegExe"="dxdllreg.exe"
"Google Desktop Search"="\"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup"
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"ISUSPM"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\ISUSPM.exe\" -scheduler"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"SsAAD.exe"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~



im hoping this is right lol.

can someone please let me know if its all good? thnx biggrin.gif
Go to the top of the page
 
+Quote Post
Trevuren
post Nov 27 2007, 09:19 PM
Post #2


SuperHelper
Group Icon

Group: Malware Expert
Posts: 8,654
Joined: 14-December 04
From: Ontario, Canada
Member No.: 20,259
Operating System: Windows 7 Ultimate 32-bit
Windows 7 Home Premium 64-bit




Hello shanepie and welcome to the What the Tech Forums

My name is Trevuren and I will be helping you with your problem. Unfortunately, the data that you posted is insufficient to allow us to determine if your system is OK. Please do the following:

Download HijackThis from Here .
  • Choose the default location of C:\Program Files\Trend Micro\HijackThis as the destination. HJT needs to be in its own folder so that the program itself isn't deleted by accident. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!
  • Click the Install button.
  • Accept the license agreement .
  • Click Do a system scan and save a log file. A Notepad file will open.
  • Select all the text by hitting the [Ctrl+A] keys, then copy your selection to the clipboard by pressing the [Ctrl+C] keys.
  • Paste the log into this thread by hitting the [Ctrl+V] keys.
  • when you click Save Log) (Ctrl-A to'select all', Ctrl-C to 'copy')
  • POST the log into this thread using 'Add Reply' (Ctrl-V to 'paste')



DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS MOST OF THE FILES ARE LEGIT AND VITAL TO THE FUNCTION OF YOUR COMPUTER


Go to the top of the page
 
+Quote Post
Trevuren
post Nov 30 2007, 03:36 PM
Post #3


SuperHelper
Group Icon

Group: Malware Expert
Posts: 8,654
Joined: 14-December 04
From: Ontario, Canada
Member No.: 20,259
Operating System: Windows 7 Ultimate 32-bit
Windows 7 Home Premium 64-bit




I hope you are well and not experiencing any difficulties carrying out my last set of instructions. If you are, do not hesitate to ask for further explanations. If however, your problem has been solved or you no longer require our assistance, please advise us accordingly and we will archive your topic.

Trevuren
Go to the top of the page
 
+Quote Post
Trevuren
post Dec 16 2007, 12:21 AM
Post #4


SuperHelper
Group Icon

Group: Malware Expert
Posts: 8,654
Joined: 14-December 04
From: Ontario, Canada
Member No.: 20,259
Operating System: Windows 7 Ultimate 32-bit
Windows 7 Home Premium 64-bit




Due to inactivity this topic will be closed.
If you need help please start a new thread and post a new HJT log
Go to the top of the page
 
+Quote Post

Closed TopicStart new topic

 


RSS Time is now: 15th March 2010 - 08:52 AM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy