TechSpot

HiJack This Log File Attached

By javankrona
Oct 16, 2005
  1. Help me ...
    ... I'm being pop-uped and PC-Slowed to death.

    TIA
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    First Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    The text between the dotted lines underneath goes between the dotted lines of that post.
    Make sure to follow ALL instructions, and in HJT tick/fix ALL lines!
    ...................................................................................................
    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.the818search-co.com/sp2.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.the818search-co.com/sp2.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.the818search-co.com/sp2.php
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.excite.com/microsoft/ie50
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.the818search-co.com/sp2.php
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BellSouth
    /P/ O4 - HKLM\..\Run: [Change Lines] C:\chngline.exe
    /P/ O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\APD123.exe
    /P/ O4 - HKLM\..\Run: [XRTGLGJ] C:\WINDOWS\XRTGLGJ.exe
    /P/ O4 - HKLM\..\Run: [winsync] C:\WINDOWS\lslppd.exe reg_run
    /P/ O4 - HKLM\..\Run: [System service76] C:\WINDOWS\ETB\POKAPOKA76.EXE
    /P/ O4 - HKLM\..\Run: [dmejz.exe] C:\WINDOWS\SYSTEM\dmejz.exe
    /P/U/ O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\CMSystem\CMSystem.exe"
    /P/ O4 - Startup: nrna.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    Fix ALL your O16 - DPF: entries
    O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - (no file)
    ...................................................................................................
     
  3. javankrona

    javankrona TS Rookie Topic Starter

    Updated HiJack This Log File

    I have performed all actions as directed, and have attached the latest HiJack This log file. One file name had changed; the file identified in the original HiJack This scan changed from DMEJZ.EXE TO DMHDI.EXE. I 'fixed' the line item in the HiJack This scan.

    Also, there is another file that I question:

    RUNDLL

    Is this a problem file as well?

    Thanks

    Java
     
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    Your log is clean.
    The rundll.exe is a legit 16-bit program, also exists in 32-bit version as rundll32.exe
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...