TechSpot

HijackThis log help plz

By jimmysmalz
Feb 17, 2007
Topic Status:
Not open for further replies.
  1. I have been unable to open my taskmanager through Ctrl+Alt+Delete or by right-clicking my taskbar.

    Also Shareaza runs as soon as I open Windows and will re-open after I close the program

    View attachment 13788
  2. tomrca

    tomrca TS Rookie Posts: 1,051

    hi there. well !!! you have lots to repair. you have no obvious antivirus or firewall programmes go get the free firewall from HERE and the free avg antivius programme first. then GO HERE (after accessing this link, it may be worth printing the instructions if you have the ability) and read the instructions. after this you will need to rename hijack this to analyser 1991, place in its own folder within prog files. then do a scan with it and post the fresh hjt log and avg anti-spy-ware log.
    it is very important that you follow the instructions as closely as possible. see you soon.
    by the way jimmysmalz, welcome to techspot:grinthumb

    you have a hijacker and more
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    Hello and welcome to Techspot.

    Your system is badly infected with all kinds of nasties.

    Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

    If after reading the above, you wish to clean your system, do the following.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of jimmysmalz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  4. jimmysmalz

    jimmysmalz TS Rookie Topic Starter

    Updated HJT log

    First I just wanna thank both of your for your help, my pc's running much better. I followed all the instructions above and here is my updated HJT log
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 25,948   +19

    Your system is still infected. I asked you to post an AVG Antispyware log, please do so in your next reply.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.


    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    JXE.exe
    BLUH.exe
    vjkfs.exe
    wupdater.exe

    Close task manager.

    Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank

    O2 - BHO: PopThis! BHO - {0549E6CB-9985-42F6-8FD6-4EC017E6AAE1} - C:\Program Files\mathies.com\PopThis!\PopThis.dll (file missing)

    O2 - BHO: (no name) - {0A1357F4-9219-4B53-AAA6-C48DDD666875} - C:\WINDOWS\System32\acliui.dll (file missing)

    O2 - BHO: (no name) - {4A0372D8-D613-6E48-9682-3430F9356CFD} - C:\WINDOWS\Xojidqwi.dll (file missing)

    O3 - Toolbar: (no name) - {EB7FD4E8-D794-4B24-95A9-8BD094CBB46D} - (no file)

    O3 - Toolbar: SuperBar - {63BA6984-A34B-4737-866E-748FB498A97A} - C:\Program Files\SUPERBAR\SUPERBAR.dll (file missing)

    O3 - Toolbar: Search - {8BFF094A-0176-F93B-E76E-0F0ABD385929} - C:\WINDOWS\Xojidqwi.dll (file missing)

    O4 - HKLM\..\Run: [JXE] C:\WINDOWS\JXE.exe

    O4 - HKLM\..\Run: [BLUH] C:\WINDOWS\BLUH.exe

    O4 - HKLM\..\Run: [HBr5OnZ] C:\WINDOWS\vjkfs.exe

    O4 - Global Startup: updater.lnk = C:\Program Files\Common Files\updater\wupdater.exe

    O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/1452/ftp.coupons.com/r3302/cpbrkpie.cab

    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\Program Files\Common Files\updater\wupdater.exe
    C:\WINDOWS\JXE.exe
    C:\WINDOWS\BLUH.exe
    C:\WINDOWS\vjkfs.exe

    Reboot into normal mode and rehide your protected OS files.

    Post fresh HJT and AVG Antispyware logs.

    Regards Howard :)

    This thread is for the use of jimmysmalz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.