little eagle
Reboot in SAFE MODE
Click Start Select Control Panel
double click Add/Remove Programs
look for any of the following, and uninstall them:
Window Search
Window Searching
Lop.com
LOP SEARCH
Browser Enhancer
Ultimate Browser Enhancer
IMPORTANT!!!
you may find entries similair to the above but with Weird spacing in the names.
Close all Browser and Program Windows and have HijackThis fix the following.
Do this by checking the box beside each and then clicking on Fix checked.
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.mykqtztrobvqp.com/OLlD03_fxbkzX…ElYxgn7SRZ.html
O2 - BHO: (no name) - {672A173F-A862-B8EE-696A-3E972F4D8917} - C:\PROGRA~1\Itchrdr\Roam Warn.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
The following have randomly named file names, and as such are normally malware.
UNLESS you know what they are, and they are from a safe source, follow their process tree.
Right click on the file and go to Properties. Then go to the Version tab to see what company name it's from:
If it's from some name you never heard of or if it's blank, please check for removal also.
O4 - HKLM\..\Run: [Info Send] C:\PROGRA~1\PLANIN~1\Team Open.exe
O4 - HKLM\..\Run: [bait obj love each] C:\Documents and Settings\All Users\Application Data\date idol bait obj\MATHACTIVE.exe
Delete the following file(s) and folder(s) listed if you have dicided to remove tham.
C:\PROGRA~1\PLANIN~1\Team Open.exe<< C:\Documents and Settings\All Users\Application Data\date idol bait obj\MATHACTIVE.exe File
Some of these files and folders might have the hidden atribute
How to show hidden files and folders in Windows Instructions here
Then run System Security Suite. Extract it from the zip file into a folder.
http://www.igorshpak.net/software/3ssetup104.zip
Under "items to clear" click all. Then click "clear selected items"
Reboot and Rescan with HJT and post a new log here.
Also please describe how your computer behaves at the moment.
Click Start Select Control Panel
double click Add/Remove Programs
look for any of the following, and uninstall them:
Window Search
Window Searching
Lop.com
LOP SEARCH
Browser Enhancer
Ultimate Browser Enhancer
IMPORTANT!!!
you may find entries similair to the above but with Weird spacing in the names.
Close all Browser and Program Windows and have HijackThis fix the following.
Do this by checking the box beside each and then clicking on Fix checked.
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.mykqtztrobvqp.com/OLlD03_fxbkzX…ElYxgn7SRZ.html
O2 - BHO: (no name) - {672A173F-A862-B8EE-696A-3E972F4D8917} - C:\PROGRA~1\Itchrdr\Roam Warn.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
The following have randomly named file names, and as such are normally malware.
UNLESS you know what they are, and they are from a safe source, follow their process tree.
Right click on the file and go to Properties. Then go to the Version tab to see what company name it's from:
If it's from some name you never heard of or if it's blank, please check for removal also.
O4 - HKLM\..\Run: [Info Send] C:\PROGRA~1\PLANIN~1\Team Open.exe
O4 - HKLM\..\Run: [bait obj love each] C:\Documents and Settings\All Users\Application Data\date idol bait obj\MATHACTIVE.exe
Delete the following file(s) and folder(s) listed if you have dicided to remove tham.
C:\PROGRA~1\PLANIN~1\Team Open.exe<< C:\Documents and Settings\All Users\Application Data\date idol bait obj\MATHACTIVE.exe File
Some of these files and folders might have the hidden atribute
How to show hidden files and folders in Windows Instructions here
Then run System Security Suite. Extract it from the zip file into a folder.
http://www.igorshpak.net/software/3ssetup104.zip
Under "items to clear" click all. Then click "clear selected items"
Reboot and Rescan with HJT and post a new log here.
Also please describe how your computer behaves at the moment.