Hijack This File

[makinlifesimple]

I heard this will help my computer from always freezing..... so here's the txt file. Also dumprep.exe is always taking up all of my computer's process space, how do i fix it? Thanks.

 

[howard_hopkinso]

Hello and welcome to Techspot.

You`re using an outdated version of HJT. The current version is 1.99.1.

Go HERE and follow the instructions exactly.

Post a fresh HJT log into this thread, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of makinlifesimple only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[makinlifesimple]

Here You Go

This Should Do It...thanks!

 

[howard_hopkinso]

Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Boot into safe mode, under your normal user name. See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html

Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: CVirtualDNSObj Object - {86C510E9-97EF-4749-914F-0280247BE3A6} - C:\WINDOWS\VirtualDNS.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

O11 - Options group: [INTERNATIONAL] International*

O16 - DPF: {2D36AF92-04D3-11D8-B719-0000865F231B} (TMinReq Class) - https://my.sabre.com/jars/TMinReqX.dll

O20 - Winlogon Notify: winzzd32 - winzzd32.dll (file missing)

Click on the fix checked button.

Close HJT.

Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted.

This is the filepath your need to enter into killbox.

C:\WINDOWS\VirtualDNS.dll

Once your system has rebooted, turn system restore back on and post a fresh HJT log.

Regards Howard

This thread is for the use of makinlifesimple only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[makinlifesimple]

A Little More Detail Please

I did the top half, but the bottom half,

Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted.

This is the filepath your need to enter into killbox.

C:\WINDOWS\VirtualDNS.dll

Once your system has rebooted, turn system restore back on and post a fresh HJT log.

How do I run "killbox.exe file" ?

 

[makinlifesimple]

Never Mind

I understand what you meant, that was a stupid question. I will know send the new HJT file.

 

[howard_hopkinso]

I`m going to assume that you have extracted the Killbox.exe file from the zip file.

In order to run Killbox, just double click on the .exe file, it looks like a red circle with a white X in it.

Regards Howard

 

[makinlifesimple]

Here You Go

This is my new HJT File, please check it and make sure everything is OK, thanks.

 

[howard_hopkinso]

Well done, that`s a clean HJT log.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of makinlifesimple only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[makinlifesimple]

I have another computer

I am going to give you the HJT file for my other coputer, please check it out, thanks!

 

[howard_hopkinso]

I am going to give you the HJT file for my other coputer, please check it out, thanks!

Yes that`s no problem.

Regards Howard

 

[makinlifesimple]

HJT File for my other desktop

Here's the HJT file for my other computer, check it out, thanks a lot.

 

[howard_hopkinso]

That`s a clean log.

Just have HJT fix these two inactive entries.

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

Regards Howard

This thread is for the use of makinlifesimple only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[makinlifesimple]

Couple More Questions

I have a couple other questions:

1.) What is dumprep.exe ? It is always taking up most of my CPU'S space and memory.

2.) Whenever my computer starts I recieve this error message, is their anyway to fix it:

regedit.exe - Application Error

The application failed to initialize properly (0XC0000142). Click on OK to terminate the application.

If it is talking about a Registry Editor, I don't have one any more, I removed it... So I have no idea what regedit stands for....

 

[howard_hopkinso]

See HERE for info on the dumprep.exe file.

Please post a fresh HJT log.

Regards Howard