TechSpot

h91746.exe Removal

By tmwight
Apr 18, 2006
  1. Can anyone help me remove the h91746.exe please? I ran HijackThis and the log follows. Please let me know.

    Thanks
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go HERE and follow the instructions.

    Then, go HERE and do likewise.

    Once you`ve done that, go HERE and follow all the instructions exactly.

    Post a fresh HJT log, only after doing the above.

    Regards Howard :wave: :wave:
     
  3. tmwight

    tmwight TS Rookie Topic Starter

    Okay, here's the new HJT log.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Go to add remove programmes in your control panel. Uninstall any thing to do with(if there).

    MSN Toolbar Suite

    Close control panel.

    Click start/run and type regsvr32 /u C:\WINDOWS\SYSTEM32\winbue32.dll into the runbox and press the enter key.

    Do the same for this as well. C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

    Open your task manager and click on the processes tab. End process for(if there).

    Admin.exe
    msnindex.exe

    Close task manager.

    Run HJT with no other programmes open and let HJT fix the following(if there).

    R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)

    O2 - BHO: Nothing - {8d83b16e-0de1-452b-ac52-96ec0b34aa4b} - C:\WINDOWS\system32\hpA886.tmp (file missing)

    O2 - BHO: MSN Toolbar BHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

    O4 - Global Startup: Digital Line Detect.lnk = ?

    O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe

    O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O20 - Winlogon Notify: winbue32 - C:\WINDOWS\SYSTEM32\winbue32.dll

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files(if there).

    C:\WINDOWS\SYSTEM32\winbue32.dll
    C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
    C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
    C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
    C:\WINDOWS\system32\hpA886.tmp

    Reboot into normal mode and turn system retore back on.

    Now go and run the Ewido scan in the instructions I gave you.

    Regards Howard :)
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...