First
Read: Only use these HJT-instructions when asked!
/P/ Process needs to be stopped
The text between the dotted lines underneath goes between the dotted lines of that post.
Make sure to follow ALL instructions, and in HJT tick/fix ALL lines!
...................................................................................................
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.the818search-co.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.the818search-co.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.the818search-co.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.excite.com/microsoft/ie50
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.the818search-co.com/sp2.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BellSouth
/P/ O4 - HKLM\..\Run: [Change Lines] C:\
chngline.exe
/P/ O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\
APD123.exe
/P/ O4 - HKLM\..\Run: [XRTGLGJ] C:\WINDOWS\
XRTGLGJ.exe
/P/ O4 - HKLM\..\Run: [winsync] C:\WINDOWS\
lslppd.exe reg_run
/P/ O4 - HKLM\..\Run: [System service76] C:\WINDOWS\
ETB\POKAPOKA76.EXE
/P/ O4 - HKLM\..\Run: [dmejz.exe] C:\WINDOWS\SYSTEM\
dmejz.exe
/P/U/ O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\
CMSystem\CMSystem.exe"
/P/ O4 - Startup:
nrna.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
Fix ALL your O16 - DPF: entries
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - (no file)
...................................................................................................