Heres my HJT log this is my first time i kno i have spyware!
#1
Posted 01 September 2006 - 11:19 PM
Register to Remove
#2
Posted 02 September 2006 - 10:37 AM
CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!
Run Hijack This!
Click "Do a systen scan only".
Then "check" the box to the left of these item(s):
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D2B28847-49A6-327A-A4DF-641346DB6CE4} - C:\WINDOWS\System32\lbx.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (no name) - {3A7E29D7-86DB-4EC8-B676-91AE01C244A8} - C:\Program Files\60et5o9t\60et5o9t.dll
O2 - BHO: SDWin32 Class - {8C913AA1-C2FB-4F17-B5DC-9D6BB3BC5D05} - C:\WINDOWS\System32\hpdct.dll (file missing)
O2 - BHO: (no name) - {ADB8B624-3AC3-4694-8F46-C6DCB3F80911} - C:\Program Files\60et5o9t\60et5o9t.dll
O2 - BHO: (no name) - {D2B28847-49A6-327A-A4DF-641346DB6CE4} - C:\WINDOWS\System32\lbx.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-A1F6-FC7EB590A97D} - (no file)
O4 - HKLM\..\Run: [98D0CE0C16B1] rundll32.exe D0CE0C16B1,D0CE0C16B1
O4 - HKCU\..\Run: [Uuhn] C:\WINDOWS\System32\??mbols\wucrtupd.exe
O4 - HKCU\..\Run: [Aida] "C:\WINDOWS\System32\PPATCH~2\wuauboot.exe" -vt tzt
O20 - AppInit_DLLs: nopdb.dll
Then click "Fix checked" and close Hijack This!.
Reboot in "safe" mode.
Delete all of the following noted (in red) file(s)/FOLDER(s) you can find:
c:\program files\60et5o9t <--- FOLDER
c:\windows\system32\??mbols <--- FOLDER
c:\windows\system32\lbx.dll <--- file
c:\windows\system32\ppatch~2 <--- FOLDER
c:\windows\system32\nopdb.dll <--- file
Some malware files may be "hidden".
Be sure to show hidden files when looking for these file(s) and/or folder(s).
Reboot in normal mode and "copy/paste" a new HijackThis! log file into this thread.
The help you receive here is free.
If you wish to show your appreciation, then you may donate to help keep us online.
Want to help others? Join the ClassRoom and learn how.
Download Hijack This! My Website: UnSpyMe!
#3
Posted 02 September 2006 - 12:20 PM
#4
Posted 02 September 2006 - 12:22 PM
Hows' it running?
Securing Your PC After An Attack
The help you receive here is free.
If you wish to show your appreciation, then you may donate to help keep us online.
Want to help others? Join the ClassRoom and learn how.
Download Hijack This! My Website: UnSpyMe!
#5
Posted 02 September 2006 - 09:39 PM
#6
Posted 02 September 2006 - 09:44 PM
Keep the vents free from obstructions to allow for ventilation to solve the overheating.
Thank you for choosing TomCoyote for your malware removal solutions.
M68
Securing Your PC After An Attack
The help you receive here is free.
If you wish to show your appreciation, then you may donate to help keep us online.
Want to help others? Join the ClassRoom and learn how.
Download Hijack This! My Website: UnSpyMe!
#7
Posted 03 September 2006 - 04:47 PM
If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.
If this is not your thread please start a New Topic.
The help you receive here is free.
If you wish to show your appreciation, then you may donate to help keep us online.
Want to help others? Join the ClassRoom and learn how.
Download Hijack This! My Website: UnSpyMe!
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users