Hijack This log

[Mikjensen]

This is on a Dell Dimension 4550. Win XP SP2. Pent 4 2 Ghz 256 MB

I have downloaded and run Ewido and run the on-line scan from Trend Micro. I am very suspicious of the following entries:
O4 - HKLM\..\Run: [jrm\] c:\windows\mrjj.exe
O4 - HKLM\..\Run: [virD] C:\windows\mrjj.exe
O4 - HKLM\..\Run: [noC=] C:\windows\mrjj.exe
and also all of the R0, R1 and R3 entries but I don't want to change anything until I'm sure.

Thanks in advance for your help,

Mike

 

[RealBlackStuff]

Try both of these:
http://uk.trendmicro-europe.com/consumer/products/housecall_launch.php
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Then follow these instructions EXACTLY
Read: How to remove Begin2Search/Coolwebsearch and Other Nasties

Read: How to remove Trojans and its ilk!

Then Read: How to post your Hijackthis log-files as an attachment.

 

[Mikjensen]

HJT log

OK, I have followed all of the steps. I had 1 problem. One of the local user temp files will not allow me access. When I restart it reloads several of the unwanted programs.

 

[Mikjensen]

HJT Log

I think I have it cleaned up. Here is the new HJT log

 

[RealBlackStuff]

Now KEEP it clean!