What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HiJack This Log

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Well, you guys have helped me before. Now it's my boss that needs your help. I jumped ahead a couple of steps by runing ATF Cleaner and AVG.

Problem: Computer lags, especially after running Norton Antivirus. Takes a long time to start up and shut down. "X"ing out of a window takes a long time as the window creeps toward the bottom of the screen. Ect., Ect…I'm sure you've heard it all before. Here's the HijackThis Log. Take a look and see what you think.

Logfile of HijackThis v1.99.1
Scan saved at 11:17:24 AM, on 12/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Corel\Suite8\Programs\DAD8.EXE
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\RMClient\PMCTray.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {1DD32093-E374-341B-E07C-631608E16BFE} - C:\WINDOWS\crig.dll
O2 - BHO: (no name) - {6BA66987-2CBD-7E8B-149E-DBD4784AEDA3} - (no file)
O2 - BHO: Class - {867653BB-CBDA-5ADF-86A5-ECF1FB3432E2} - C:\WINDOWS\netvb32.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [JobHisInit] C:\Program Files\RMClient\JobHisInit.exe
O4 - HKLM\..\Run: [MplSetUp] C:\Program Files\RMClient\MplSetUp.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ipre32.exe] C:\WINDOWS\ipre32.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [EnigmaPopupStop] C:\Program Files\SpyHunter\PopupBlocker\EnigmaPopupStop.exe
O4 - HKLM\..\Run: [eersxakjwriz] C:\WINDOWS\System32\dmqzqx.exe
O4 - HKLM\..\Run: [crar32.exe] C:\WINDOWS\system32\crar32.exe
O4 - HKLM\..\Run: [ieul32.exe] C:\WINDOWS\system32\ieul32.exe
O4 - HKLM\..\Run: [appoo32.exe] C:\WINDOWS\system32\appoo32.exe
O4 - HKLM\..\Run: [mskb32.exe] C:\WINDOWS\mskb32.exe
O4 - HKLM\..\Run: [crkb32.exe] C:\WINDOWS\system32\crkb32.exe
O4 - HKLM\..\Run: [sdkqp32.exe] C:\WINDOWS\system32\sdkqp32.exe
O4 - HKLM\..\Run: [ipmt.exe] C:\WINDOWS\system32\ipmt.exe
O4 - HKLM\..\Run: [mszx.exe] C:\WINDOWS\system32\mszx.exe
O4 - HKLM\..\Run: [sysuv32.exe] C:\WINDOWS\system32\sysuv32.exe
O4 - HKLM\..\Run: [mfcxy32.exe] C:\WINDOWS\system32\mfcxy32.exe
O4 - HKLM\..\Run: [netvn.exe] C:\WINDOWS\system32\netvn.exe
O4 - HKLM\..\Run: [javadb32.exe] C:\WINDOWS\javadb32.exe
O4 - HKLM\..\Run: [apiyl32.exe] C:\WINDOWS\system32\apiyl32.exe
O4 - HKLM\..\Run: [nettd.exe] C:\WINDOWS\nettd.exe
O4 - HKLM\..\Run: [winze32.exe] C:\WINDOWS\winze32.exe
O4 - HKLM\..\Run: [iedi.exe] C:\WINDOWS\iedi.exe
O4 - HKLM\..\Run: [netmf32.exe] C:\WINDOWS\netmf32.exe
O4 - HKLM\..\Run: [apihs.exe] C:\WINDOWS\system32\apihs.exe
O4 - HKLM\..\Run: [addvv32.exe] C:\WINDOWS\addvv32.exe
O4 - HKLM\..\Run: [ipmt32.exe] C:\WINDOWS\ipmt32.exe
O4 - HKLM\..\Run: [javayc.exe] C:\WINDOWS\system32\javayc.exe
O4 - HKLM\..\Run: [apicz.exe] C:\WINDOWS\apicz.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [Ncao] C:\Documents and Settings\karndt\Application Data\urpo.exe
O4 - HKCU\..\Run: [Fezk] C:\WINDOWS\System32\?hkntfs.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Corel Desktop Application Director 8.LNK = C:\Corel\Suite8\Programs\DAD8.EXE
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: SmartNetMonitor for Client.lnk = C:\Program Files\RMClient\PMClient.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1136224386184
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

Thanks for your help.
Post #2
Hi Neckbones. I need to take some time to look over your Hijack This log to come up with a fix. Please remember that I am an undergraduate which means I need to have my posts to you checked by a teacher or moderator to make sure I'm giving you the proper instructions. This process won't take long and I thank you for your patience. I'll be back with you soon.
Post #3
Hi neckbones. Please download the following programs.

AboutBuster

CWShredder

Unzip the contents of AboutBuster to a folder on your desktop called Aboutbuster.

Run the program and update it but don't do a scan with it yet.

Unzip CWShredder to your desktop. Again start the program and update it, but don't do a scan with it yet.

Next reboot the PC into safe mode as explained below:
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.
Once in safe mode open the Aboutbuster folder. Click aboutbuster then click begin removal. Allow the tool to run. It will generate a log in C:\aboutbuster.txt

Next double click CWShredder. In the window click Fix. Allow the tool to run. It will not generate a log.

Once finished please reboot the PC and post the C:\aboutbuster.txt log, and a fresh Hijack This log.
Post #4
New HJT Log and About buster.

Logfile of HijackThis v1.99.1
Scan saved at 5:48:51 PM, on 12/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Corel\Suite8\Programs\DAD8.EXE
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\HijackThis.exe
C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\RMClient\PMCTray.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1DD32093-E374-341B-E07C-631608E16BFE} - (no file)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {6BA66987-2CBD-7E8B-149E-DBD4784AEDA3} - (no file)
O2 - BHO: (no name) - {867653BB-CBDA-5ADF-86A5-ECF1FB3432E2} - (no file)
O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O4 - HKLM\..\Run: [JobHisInit] C:\Program Files\RMClient\JobHisInit.exe
O4 - HKLM\..\Run: [MplSetUp] C:\Program Files\RMClient\MplSetUp.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [EnigmaPopupStop] C:\Program Files\SpyHunter\PopupBlocker\EnigmaPopupStop.exe
O4 - HKLM\..\Run: [eersxakjwriz] C:\WINDOWS\System32\dmqzqx.exe
O4 - HKLM\..\Run: [crar32.exe] C:\WINDOWS\system32\crar32.exe
O4 - HKLM\..\Run: [ieul32.exe] C:\WINDOWS\system32\ieul32.exe
O4 - HKLM\..\Run: [appoo32.exe] C:\WINDOWS\system32\appoo32.exe
O4 - HKLM\..\Run: [mskb32.exe] C:\WINDOWS\mskb32.exe
O4 - HKLM\..\Run: [crkb32.exe] C:\WINDOWS\system32\crkb32.exe
O4 - HKLM\..\Run: [sdkqp32.exe] C:\WINDOWS\system32\sdkqp32.exe
O4 - HKLM\..\Run: [ipmt.exe] C:\WINDOWS\system32\ipmt.exe
O4 - HKLM\..\Run: [mszx.exe] C:\WINDOWS\system32\mszx.exe
O4 - HKLM\..\Run: [sysuv32.exe] C:\WINDOWS\system32\sysuv32.exe
O4 - HKLM\..\Run: [mfcxy32.exe] C:\WINDOWS\system32\mfcxy32.exe
O4 - HKLM\..\Run: [netvn.exe] C:\WINDOWS\system32\netvn.exe
O4 - HKLM\..\Run: [javadb32.exe] C:\WINDOWS\javadb32.exe
O4 - HKLM\..\Run: [apiyl32.exe] C:\WINDOWS\system32\apiyl32.exe
O4 - HKLM\..\Run: [nettd.exe] C:\WINDOWS\nettd.exe
O4 - HKLM\..\Run: [winze32.exe] C:\WINDOWS\winze32.exe
O4 - HKLM\..\Run: [iedi.exe] C:\WINDOWS\iedi.exe
O4 - HKLM\..\Run: [netmf32.exe] C:\WINDOWS\netmf32.exe
O4 - HKLM\..\Run: [apihs.exe] C:\WINDOWS\system32\apihs.exe
O4 - HKLM\..\Run: [addvv32.exe] C:\WINDOWS\addvv32.exe
O4 - HKLM\..\Run: [ipmt32.exe] C:\WINDOWS\ipmt32.exe
O4 - HKLM\..\Run: [javayc.exe] C:\WINDOWS\system32\javayc.exe
O4 - HKLM\..\Run: [apicz.exe] C:\WINDOWS\apicz.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ipre32.exe] C:\WINDOWS\ipre32.exe
O4 - HKCU\..\Run: [Ncao] C:\Documents and Settings\karndt\Application Data\urpo.exe
O4 - HKCU\..\Run: [Fezk] C:\WINDOWS\System32\?hkntfs.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Corel Desktop Application Director 8.LNK = C:\Corel\Suite8\Programs\DAD8.EXE
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: SmartNetMonitor for Client.lnk = C:\Program Files\RMClient\PMClient.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1136224386184
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

AboutBuster 6.05
Scan started on [12/23/2006] at [4:54:23 PM]
————————————————————-
Internet Explorer Instances Terminated!
HomeSearch Service stopped if present
————————————————————-
Removed Stream! C:\WINDOWS\_default.pif:losgbc
Removed Stream! C:\WINDOWS\_default.pif:lqiiso
Removed Stream! C:\WINDOWS\_default.pif:ltrfwd
Removed Stream! C:\WINDOWS\_default.pif:lzjptb
Removed Stream! C:\WINDOWS\_default.pif:mfupbu
Removed Stream! C:\WINDOWS\_default.pif:nfavez
Removed Stream! C:\WINDOWS\_default.pif:npouwc
Removed Stream! C:\WINDOWS\_default.pif:npulbc
Removed Stream! C:\WINDOWS\_default.pif:nubsys
Removed Stream! C:\WINDOWS\_default.pif:oavije
Removed Stream! C:\WINDOWS\_default.pif:okyzyo
Removed Stream! C:\WINDOWS\_default.pif:oyeudn
Removed Stream! C:\WINDOWS\_default.pif:pegkjq
Removed Stream! C:\WINDOWS\_default.pif:pfvzhv
Removed Stream! C:\WINDOWS\_default.pif:plauzh
Removed Stream! C:\WINDOWS\_default.pif:pplaaw
Removed Stream! C:\WINDOWS\_default.pif:pvjbrt
Removed Stream! C:\WINDOWS\_default.pif:pwdmab
Removed Stream! C:\WINDOWS\_default.pif:pzumab
Removed Stream! C:\WINDOWS\_default.pif:qecdub
Removed Stream! C:\WINDOWS\_default.pif:qlaoqo
Removed Stream! C:\WINDOWS\_default.pif:qmnbif
Removed Stream! C:\WINDOWS\_default.pif:qzlfbm
Removed Stream! C:\WINDOWS\_default.pif:randlf
Removed Stream! C:\WINDOWS\_default.pif:rdfdyu
Removed Stream! C:\WINDOWS\_default.pif:rdoqhd
Removed Stream! C:\WINDOWS\_default.pif:romjxd
Removed Stream! C:\WINDOWS\_default.pif:rpuwji
Removed Stream! C:\WINDOWS\_default.pif:rrlgbl
Removed Stream! C:\WINDOWS\_default.pif:rwwsgt
Removed Stream! C:\WINDOWS\_default.pif:seaprm
Removed Stream! C:\WINDOWS\_default.pif:sfejym
Removed Stream! C:\WINDOWS\_default.pif:sklyuh
Removed Stream! C:\WINDOWS\_default.pif:sqpvpd
Removed Stream! C:\WINDOWS\_default.pif:tfckhk
Removed Stream! C:\WINDOWS\_default.pif:tfjqnu
Removed Stream! C:\WINDOWS\_default.pif:tknixj
Removed Stream! C:\WINDOWS\_default.pif:tnhbhz
Removed Stream! C:\WINDOWS\_default.pif:tnwmgl
Removed Stream! C:\WINDOWS\_default.pif:tszzus
Removed Stream! C:\WINDOWS\_default.pif:uktclq
Removed Stream! C:\WINDOWS\_default.pif:uqxctx
Removed Stream! C:\WINDOWS\_default.pif:uyalcg
Removed Stream! C:\WINDOWS\_default.pif:vtimwh
Removed Stream! C:\WINDOWS\_default.pif:vtuihv
Removed Stream! C:\WINDOWS\_default.pif:wdnfhg
Removed Stream! C:\WINDOWS\_default.pif:weduns
Removed Stream! C:\WINDOWS\_default.pif:woaugl
Removed Stream! C:\WINDOWS\_default.pif:xlnbug
Removed Stream! C:\WINDOWS\_default.pif:ybgtfr
Removed Stream! C:\WINDOWS\_default.pif:ykmxds
Removed Stream! C:\WINDOWS\_default.pif:zdpkpb
Removed Stream! C:\WINDOWS\_default.pif:zmjjui
Removed Stream! C:\WINDOWS\_default.pif:zobrhy
Removed Stream! C:\WINDOWS\_default.pif:zqbshb
————————————————————-
Removed File! : C:\WINDOWS\adddd32.dll
Removed File! : C:\WINDOWS\addyf.dll
Removed File! : C:\WINDOWS\addym32.exe
Removed File! : C:\WINDOWS\agdor.log
Removed File! : C:\WINDOWS\aiqzc.txt
Removed File! : C:\WINDOWS\ansaw.dat
Removed File! : C:\WINDOWS\apimn32.dll
Removed File! : C:\WINDOWS\apprf32.dll
Removed File! : C:\WINDOWS\asnhk.log
Removed File! : C:\WINDOWS\atlnn32.dll
Removed File! : C:\WINDOWS\axcef.dat
Removed File! : C:\WINDOWS\bcznh.dat
Removed File! : C:\WINDOWS\binia.dat
Removed File! : C:\WINDOWS\bpgbf.txt
Removed File! : C:\WINDOWS\clzdn.dat
Removed File! : C:\WINDOWS\cray.dll
Removed File! : C:\WINDOWS\crgy32.dll
Removed File! : C:\WINDOWS\crll.dll
Removed File! : C:\WINDOWS\crxqj.log
Removed File! : C:\WINDOWS\d3kv.dll
Removed File! : C:\WINDOWS\d3zv32.dll
Removed File! : C:\WINDOWS\dbgjr.txt
Removed File! : C:\WINDOWS\dccst.log
Removed File! : C:\WINDOWS\dujsc.txt
Removed File! : C:\WINDOWS\eckzz.dat
Removed File! : C:\WINDOWS\eglmm.txt
Removed File! : C:\WINDOWS\einow.txt
Removed File! : C:\WINDOWS\eqkex.log
Removed File! : C:\WINDOWS\evqfq.dat
Removed File! : C:\WINDOWS\evtrt.log
Removed File! : C:\WINDOWS\exwvx.dat
Removed File! : C:\WINDOWS\fefsu.dat
Removed File! : C:\WINDOWS\fjwsg.log
Removed File! : C:\WINDOWS\frhbp.log
Removed File! : C:\WINDOWS\fupsq.log
Removed File! : C:\WINDOWS\gcaod.log
Removed File! : C:\WINDOWS\gccwm.txt
Removed File! : C:\WINDOWS\gtfuw.dat
Removed File! : C:\WINDOWS\guycb.dat
Removed File! : C:\WINDOWS\hdnjv.log
Removed File! : C:\WINDOWS\hikkf.dat
Removed File! : C:\WINDOWS\hkmtc.dat
Removed File! : C:\WINDOWS\hkxpg.dat
Removed File! : C:\WINDOWS\htwyn.txt
Removed File! : C:\WINDOWS\ievv32.dll
Removed File! : C:\WINDOWS\iezm32.dll
Removed File! : C:\WINDOWS\igaki.txt
Removed File! : C:\WINDOWS\ijfef.dat
Removed File! : C:\WINDOWS\ijsyy.txt
Removed File! : C:\WINDOWS\ikpze.txt
Removed File! : C:\WINDOWS\ilvcv.txt
Removed File! : C:\WINDOWS\ipgm32.dll
Removed File! : C:\WINDOWS\iypyl.txt
Removed File! : C:\WINDOWS\javasb.dll
Removed File! : C:\WINDOWS\javasi32.dll
Removed File! : C:\WINDOWS\jcrqx.log
Removed File! : C:\WINDOWS\jhgnx.txt
Removed File! : C:\WINDOWS\juerv.txt
Removed File! : C:\WINDOWS\juetq.dat
Removed File! : C:\WINDOWS\knfcd.log
Removed File! : C:\WINDOWS\kqior.txt
Removed File! : C:\WINDOWS\mdrgn.txt
Removed File! : C:\WINDOWS\mfcbz32.dll
Removed File! : C:\WINDOWS\mjnhy.txt
Removed File! : C:\WINDOWS\mlxtc.txt
Removed File! : C:\WINDOWS\mmfyg.txt
Removed File! : C:\WINDOWS\mmzph.txt
Removed File! : C:\WINDOWS\moymj.dat
Removed File! : C:\WINDOWS\mrbax.log
Removed File! : C:\WINDOWS\netbs32.dll
Removed File! : C:\WINDOWS\netzh.dll
Removed File! : C:\WINDOWS\nmqlo.txt
Removed File! : C:\WINDOWS\noiva.txt
Removed File! : C:\WINDOWS\ntbk.dll
Removed File! : C:\WINDOWS\nthe32.dll
Removed File! : C:\WINDOWS\ntjx32.dll
Removed File! : C:\WINDOWS\ntqn.dll
Removed File! : C:\WINDOWS\nxhvc.dat
Removed File! : C:\WINDOWS\n_actpqf.txt
Removed File! : C:\WINDOWS\n_afgxwq.dat
Removed File! : C:\WINDOWS\n_agbybx.txt
Removed File! : C:\WINDOWS\n_amfubs.txt
Removed File! : C:\WINDOWS\n_bjfhwc.txt
Removed File! : C:\WINDOWS\n_bvekdr.dat
Removed File! : C:\WINDOWS\n_cipjnp.dat
Removed File! : C:\WINDOWS\n_cxetla.txt
Removed File! : C:\WINDOWS\n_czasmf.txt
Removed File! : C:\WINDOWS\n_dafijd.log
Removed File! : C:\WINDOWS\n_dbnhns.dat
Removed File! : C:\WINDOWS\n_dgacgw.log
Removed File! : C:\WINDOWS\n_drired.dat
Removed File! : C:\WINDOWS\n_eejnay.txt
Removed File! : C:\WINDOWS\n_eewngc.txt
Removed File! : C:\WINDOWS\n_erkrfu.txt
Removed File! : C:\WINDOWS\n_fhxqmg.dat
Removed File! : C:\WINDOWS\n_gpvfup.dat
Removed File! : C:\WINDOWS\n_hbvzsl.log
Removed File! : C:\WINDOWS\n_hcsmai.dat
Removed File! : C:\WINDOWS\n_hfzfye.txt
Removed File! : C:\WINDOWS\n_hxvngg.dat
Removed File! : C:\WINDOWS\n_ikbidr.txt
Removed File! : C:\WINDOWS\n_islwgo.dat
Removed File! : C:\WINDOWS\n_iswvbi.txt
Removed File! : C:\WINDOWS\n_ixwpko.txt
Removed File! : C:\WINDOWS\n_jgsmdg.log
Removed File! : C:\WINDOWS\n_kiaqsz.log
Removed File! : C:\WINDOWS\n_kioeuz.log
Removed File! : C:\WINDOWS\n_kocbpa.txt
Removed File! : C:\WINDOWS\n_laljpi.log
Removed File! : C:\WINDOWS\n_lgsnvn.txt
Removed File! : C:\WINDOWS\n_llqtre.dat
Removed File! : C:\WINDOWS\n_lvowdg.log
Removed File! : C:\WINDOWS\n_mrzrjl.dat
Removed File! : C:\WINDOWS\n_mzvwbp.log
Removed File! : C:\WINDOWS\n_nrpqnq.txt
Removed File! : C:\WINDOWS\n_nvrcjk.txt
Removed File! : C:\WINDOWS\n_opyamt.txt
Removed File! : C:\WINDOWS\n_osjybc.dat
Removed File! : C:\WINDOWS\n_oukuvy.dat
Removed File! : C:\WINDOWS\n_pcezto.dat
Removed File! : C:\WINDOWS\n_pdmzvx.txt
Removed File! : C:\WINDOWS\n_qeaonx.dat
Removed File! : C:\WINDOWS\n_qnzkgf.dat
Removed File! : C:\WINDOWS\n_rjpyjs.log
Removed File! : C:\WINDOWS\n_rnpsse.dat
Removed File! : C:\WINDOWS\n_tjkwlg.dat
Removed File! : C:\WINDOWS\n_tkwuww.log
Removed File! : C:\WINDOWS\n_tqvuyb.txt
Removed File! : C:\WINDOWS\n_tzywah.log
Removed File! : C:\WINDOWS\n_uprxup.txt
Removed File! : C:\WINDOWS\n_uqzvlx.log
Removed File! : C:\WINDOWS\n_uutjdg.log
Removed File! : C:\WINDOWS\n_uwtrqw.log
Removed File! : C:\WINDOWS\n_vmqtaw.log
Removed File! : C:\WINDOWS\n_vnwfbr.txt
Removed File! : C:\WINDOWS\n_wstdsf.log
Removed File! : C:\WINDOWS\n_xcmchs.log
Removed File! : C:\WINDOWS\n_xefals.dat
Removed File! : C:\WINDOWS\n_xojdyt.log
Removed File! : C:\WINDOWS\n_xoxkvt.log
Removed File! : C:\WINDOWS\n_yjvhlf.txt
Removed File! : C:\WINDOWS\n_ytkcec.dat
Removed File! : C:\WINDOWS\n_zoimuj.dat
Removed File! : C:\WINDOWS\n_zyulbu.dat
Removed File! : C:\WINDOWS\oinyc.log
Removed File! : C:\WINDOWS\omiqx.txt
Removed File! : C:\WINDOWS\owgdp.txt
Removed File! : C:\WINDOWS\pebeu.txt
Removed File! : C:\WINDOWS\phqbc.dat
Removed File! : C:\WINDOWS\pmjip.dat
Removed File! : C:\WINDOWS\pmygt.dat
Removed File! : C:\WINDOWS\pxqic.dat
Removed File! : C:\WINDOWS\qadwn.txt
Removed File! : C:\WINDOWS\qdzdd.log
Removed File! : C:\WINDOWS\qedgz.txt
Removed File! : C:\WINDOWS\qlhmb.txt
Removed File! : C:\WINDOWS\qmwyf.dat
Removed File! : C:\WINDOWS\rbnwd.log
Removed File! : C:\WINDOWS\reyie.log
Removed File! : C:\WINDOWS\rhjsy.log
Removed File! : C:\WINDOWS\rviqx.txt
Removed File! : C:\WINDOWS\sdkct32.exe
Removed File! : C:\WINDOWS\sdkif.dll
Removed File! : C:\WINDOWS\sdknh.dll
Removed File! : C:\WINDOWS\sdknq32.dll
Removed File! : C:\WINDOWS\sgvvw.dat
Removed File! : C:\WINDOWS\soyqs.txt
Removed File! : C:\WINDOWS\sysxf32.dll
Removed File! : C:\WINDOWS\tiwyb.log
Removed File! : C:\WINDOWS\tohma.log
Removed File! : C:\WINDOWS\uftwf.log
Removed File! : C:\WINDOWS\ujgno.dat
Removed File! : C:\WINDOWS\ukkal.dat
Removed File! : C:\WINDOWS\uldwe.log
Removed File! : C:\WINDOWS\umwnm.txt
Removed File! : C:\WINDOWS\uvusy.log
Removed File! : C:\WINDOWS\vbeoi.txt
Removed File! : C:\WINDOWS\vwamk.log
Removed File! : C:\WINDOWS\wince32.dll
Removed File! : C:\WINDOWS\winfm32.dll
Removed File! : C:\WINDOWS\winqn32.dll
Removed File! : C:\WINDOWS\wvpqy.dat
Removed File! : C:\WINDOWS\xkssz.txt
Removed File! : C:\WINDOWS\xngxb.log
Removed File! : C:\WINDOWS\xtnwd.txt
Removed File! : C:\WINDOWS\ydmvz.log
Removed File! : C:\WINDOWS\yfbwk.log
Removed File! : C:\WINDOWS\yzwbr.txt
Removed File! : C:\WINDOWS\zflhf.dat
Removed File! : C:\WINDOWS\zpbss.dat
Removed File! : C:\WINDOWS\zzvdd.txt
Removed File! : C:\WINDOWS\system32\agczi.log
Removed File! : C:\WINDOWS\system32\alafy.txt
Removed File! : C:\WINDOWS\system32\amfxa.txt
Removed File! : C:\WINDOWS\system32\apiam32.dll
Removed File! : C:\WINDOWS\system32\apify32.dll
Removed File! : C:\WINDOWS\system32\apinn32.dll
Removed File! : C:\WINDOWS\system32\apphh.dll
Removed File! : C:\WINDOWS\system32\appqo32.dll
Removed File! : C:\WINDOWS\system32\atste.txt
Removed File! : C:\WINDOWS\system32\atxxm.log
Removed File! : C:\WINDOWS\system32\bhwvn.log
Removed File! : C:\WINDOWS\system32\bkkdb.dat
Removed File! : C:\WINDOWS\system32\bogic.log
Removed File! : C:\WINDOWS\system32\cggbi.dat
Removed File! : C:\WINDOWS\system32\cqysl.txt
Removed File! : C:\WINDOWS\system32\cref.dll
Removed File! : C:\WINDOWS\system32\crvh.dll
Removed File! : C:\WINDOWS\system32\ctltp.dat
Removed File! : C:\WINDOWS\system32\cvpyk.dat
Removed File! : C:\WINDOWS\system32\d3bj32.exe
Removed File! : C:\WINDOWS\system32\d3dw32.dll
Removed File! : C:\WINDOWS\system32\d3mw.dll
Removed File! : C:\WINDOWS\system32\dgkgg.log
Removed File! : C:\WINDOWS\system32\dgsqm.dat
Removed File! : C:\WINDOWS\system32\dsffb.txt
Removed File! : C:\WINDOWS\system32\dvxvt.txt
Removed File! : C:\WINDOWS\system32\dxnfg.log
Removed File! : C:\WINDOWS\system32\evnpg.dat
Removed File! : C:\WINDOWS\system32\fjhak.log
Removed File! : C:\WINDOWS\system32\flelt.log
Removed File! : C:\WINDOWS\system32\gdkdd.txt
Removed File! : C:\WINDOWS\system32\hmfcz.dat
Removed File! : C:\WINDOWS\system32\iarhg.txt
Removed File! : C:\WINDOWS\system32\iejd32.exe
Removed File! : C:\WINDOWS\system32\ierj.dll
Removed File! : C:\WINDOWS\system32\ieuh32.dll
Removed File! : C:\WINDOWS\system32\ieyr.dll
Removed File! : C:\WINDOWS\system32\ipgu32.exe
Removed File! : C:\WINDOWS\system32\javajk.dll
Removed File! : C:\WINDOWS\system32\javaom.dll
Removed File! : C:\WINDOWS\system32\jgvsl.log
Removed File! : C:\WINDOWS\system32\jizsq.txt
Removed File! : C:\WINDOWS\system32\krxju.log
Removed File! : C:\WINDOWS\system32\kvhcj.dat
Removed File! : C:\WINDOWS\system32\kyfxb.log
Removed File! : C:\WINDOWS\system32\luczz.dat
Removed File! : C:\WINDOWS\system32\mfcbl.dll
Removed File! : C:\WINDOWS\system32\mfclf.dll
Removed File! : C:\WINDOWS\system32\mgnmw.dat
Removed File! : C:\WINDOWS\system32\mgzxk.dat
Removed File! : C:\WINDOWS\system32\msdf32.dll
Removed File! : C:\WINDOWS\system32\mskt.dll
Removed File! : C:\WINDOWS\system32\msmp32.dll
Removed File! : C:\WINDOWS\system32\netad32.dll
Removed File! : C:\WINDOWS\system32\netdn.dll
Removed File! : C:\WINDOWS\system32\netqk32.dll
Removed File! : C:\WINDOWS\system32\netth.exe
Removed File! : C:\WINDOWS\system32\nvfff.log
Removed File! : C:\WINDOWS\system32\ohbkp.dat
Removed File! : C:\WINDOWS\system32\okqzt.dat
Removed File! : C:\WINDOWS\system32\opamw.txt
Removed File! : C:\WINDOWS\system32\pwsuf.dat
Removed File! : C:\WINDOWS\system32\qalmw.log
Removed File! : C:\WINDOWS\system32\qkksh.log
Removed File! : C:\WINDOWS\system32\rbgvc.log
Removed File! : C:\WINDOWS\system32\reurm.dat
Removed File! : C:\WINDOWS\system32\rhiqr.log
Removed File! : C:\WINDOWS\system32\rnrhu.log
Removed File! : C:\WINDOWS\system32\rugxd.dat
Removed File! : C:\WINDOWS\system32\rvmuk.txt
Removed File! : C:\WINDOWS\system32\rxifb.txt
Error Removing ! : C:\WINDOWS\system32\S32EVNT1.DLL
Removed File! : C:\WINDOWS\system32\sdkjf.exe
Removed File! : C:\WINDOWS\system32\simxh.log
Removed File! : C:\WINDOWS\system32\soinv.dat
Removed File! : C:\WINDOWS\system32\swhtz.log
Error Removing ! : C:\WINDOWS\system32\SymNeti.dll
Error Removing ! : C:\WINDOWS\system32\SymRedir.dll
Removed File! : C:\WINDOWS\system32\sysje.dll
Removed File! : C:\WINDOWS\system32\systx.dll
Removed File! : C:\WINDOWS\system32\tbusc.dat
Removed File! : C:\WINDOWS\system32\tcsxd.txt
Removed File! : C:\WINDOWS\system32\tidvf.txt
Removed File! : C:\WINDOWS\system32\tzqui.dat
Removed File! : C:\WINDOWS\system32\uyqpj.log
Removed File! : C:\WINDOWS\system32\vkcjj.txt
Removed File! : C:\WINDOWS\system32\vsiuq.txt
Removed File! : C:\WINDOWS\system32\vxkju.dat
Removed File! : C:\WINDOWS\system32\wdrcs.dat
Removed File! : C:\WINDOWS\system32\wingd32.dll
Removed File! : C:\WINDOWS\system32\winvk32.dll
Removed File! : C:\WINDOWS\system32\wjjjo.txt
Removed File! : C:\WINDOWS\system32\xnydb.txt
Removed File! : C:\WINDOWS\system32\xoyos.dat
Removed File! : C:\WINDOWS\system32\ybggb.log
Removed File! : C:\WINDOWS\system32\ylpft.dat
Removed File! : C:\WINDOWS\system32\ynsiw.txt
————————————————————-
Removed Temp Files
Internet Explorer Settings Reset!
————————————————————-
Scan was COMPLETED SUCCESSFULLY at 5:32:08 PM
Post #5
That's looking a little better. Two more steps below:

Step 1

I would like to see an uninstall list from HijackThis.
  • Run Hijackthis.
  • Click on Open the Misc Tools section.
  • Next click on Open uninstall manager.
  • Press the Save list button. It will open a Notepad file.
  • Save the file to your desktop, with the default name of uninstall_list
  • Copy & Paste the entire contents of that file in your in your next post.
Step 2
  • Download this file - combofix.exe
  • Double click combofix.exe & follow the prompts.
  • When finished, it will produce a log for you. Post that log in your next reply. If the log does not open automatically it can be found in C:\combofix.txt

    Note: Do not mouseclick combofix's window while it's running. That may cause it to stall
Post back with the uninstall list, the combofix.txt log and a fresh Hijack This log.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI