TechSpot

HJT scan log need help w/

By MJordan20
Jan 18, 2006
  1. Can someone please review & tell me of any threats and or un-needed programs or applications I have. Any input is appreciated, thank-you. :monkey:
     
  2. swker98

    swker98 TechSpot Paladin Posts: 1,077

    beware you will only get help if you poost this as an attchment
    have a nice day :)
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Boot into safe mode, and turn off system restore.

    Go to add remove programmes in your control panel, and uninstall anything to do with the following(if there)

    C:\Program Files\winupdates\winupdates.exe
    C:\Program Files\LimeWire\LimeWire.exe

    Then close your control panel.

    Open your task manager, if you can, and click on the processes tab. End process for(if there)

    winupdates.exe
    d?xplore.exe
    LimeWire.exe

    Close task manager.

    Run HJT with no other programmes open, and let HJT fix the following(if there)

    R3 - Default URLSearchHook is missing

    O2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dll
    O2 - BHO: (no name) - {49D93528-9165-21BB-D753-61550B807B3B} - C:\WINDOWS\System32\qwiid.dll (file missing)
    O2 - BHO: (no name) - {A279B365-0684-282A-8493-72A2D9F56691} - C:\WINDOWS\System32\arsp.dll (file missing)

    O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
    O4 - HKCU\..\Run: [Sos] C:\WINDOWS\System32\d?xplore.exe

    O15 - Trusted Zone: *.05p.com (HKLM)
    O15 - Trusted Zone: *.scoobidoo.com (HKLM)
    O15 - Trusted IP range: 206.161.124.130 (HKLM)
    O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)

    Fix all your 016 DPF entries.

    Also, fix this if it doesn`t belong to your ISP.
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E35E60ED-9856-4D8A-98B8-7FB9CD97230C}: NameServer = 205.188.146.145

    Close HJT.

    Delete the following bold files(if there)

    C:\Program Files\winupdates\winupdates.exe
    C:\Program Files\LimeWire\LimeWire.exe
    C:\WINDOWS\System32\d?xplore.exe

    Reboot into normal mode, and turn system restore back on.

    Regards Howard :)
     
  5. computer help

    computer help TS Rookie Posts: 68

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...