TechSpot

HJT log

By Richard132
Oct 12, 2005
  1. basicly my home page keeps being changed and i get pop ups about registry cleanup and credit card sites... and i keep getting about 6 programs appear on my desktop like mobile phone, antivirus, love matcher etc its very annoying as they just keep reappearing.

    anyways heres my log thank you in advance for any help :)

    IV UPLOADED THE TXT FILE (THE ZIP WASNT A VIRUS BY THE WAY COZ I SEE NO 1 DL'ING IT LOL)
     
  2. Richard132

    Richard132 TS Rookie Topic Starter Posts: 40

    My HJT log

    hi me again iv uploaded the text :bounce:
     
  3. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    C:\Documents and Settings\Richard\Desktop\New Folder\HijackThis.exe
    put HijackThis in e.g C:\Program Files\HJT and NOT on the Desktop!.

    First Read: Use these HJT-instructions when asked
    The text underneath goes between the dotted lines of that post.
    ...................................................................................................
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.uqfcewheziji.uk/cEI_y8mleQIQjas1pMzmY8Tf5XAbdYrHMcHDKbxbj6VAqD1hrIjnMP5AuD18vSv0.asp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.glghdvvesrup.com/cEI_y8mleQKzJ9uYQ2Y606Ln/suGrBhifbqxMe4Tr4E.jsp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    /P/U/ O2 - BHO: (no name) - {C31A7B3E-4F8F-FF5C-7B94-914FEF6402DB} - C:\DOCUME~1\Richard\APPLIC~1\DEAFBU~1\Play delete.exe
    /P/U/ O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    /P/U/ O4 - HKLM\..\Run: [bolt iso dvd ping] C:\Documents and Settings\All Users\Application Data\Tons each bolt iso\FreeRegs.exe
    /P/U/ O4 - HKCU\..\Run: [dogwindow] C:\DOCUME~1\Richard\APPLIC~1\FLAPAM~1\Open that.exe
    Fix ALL your O16 - DPF: entries
    Unless these IP-numbers are from your ISP, fix this O17
    O17 - HKLM\System\CCS\Services\Tcpip\..\{39CB019C-971A-4826-9D63-0E7F111711B6}: NameServer = 205.188.146.145
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    ...................................................................................................
     
  4. Richard132

    Richard132 TS Rookie Topic Starter Posts: 40

    hi sorry bout putting it on my desktop i have reinstalled HJT in program files:
    here is my log. :bounce:
     
  5. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    That does not change the log, it's the same as before, so do as I indicated.
    HJT needs its own directory, so it can make backups of the changes, in case you need to UNDO a HJT change.
     
  6. Richard132

    Richard132 TS Rookie Topic Starter Posts: 40


    you want me to tick all the above and click fix checked? and if yes whats wrong with the windows update?
     
  7. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    Nothing wrong in itself, just cleaning up!
    And yes, the instructions say: (if still there) place a tick-mark in the little square before:
    which is for every line between the dots (if there)
     
  8. Richard132

    Richard132 TS Rookie Topic Starter Posts: 40

    hi iv done what you asked heres my fresh log

    ps: didnt fix aoltoolbar and windows update and msn plus. because i feel there important if im wrong say otherwise.

    i knew that open that.exe and tons each bolt iso was something what was it?

    and i dont know if those ips are my interent provider?
     
  9. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    That IP is from AOL.
    You're wasting my time with the rest.
    Either you follow all my advice or look for help somewhere else!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...