TechSpot

I have a trojan i think

By volt
Feb 13, 2007
  1. Hi there everyone,

    Im so sorry if i sound really stupid - but im not all that computer smart - and have tried my best to follow all the instructions in the viruses-spyware-mal ect thread..

    Ive done all that was written, except for the VundoFix - which i did download and try to scan - but after about 10 minutes, it would come up saying that it was not responding ????

    I think this all initaily started to happen when i downloaded the new version of MSN msger (*thats just when i first noticed it though).

    Also - the anti-virus i generally use is NOD32 (*but i did download AVG top do those scans).

    If i could get any help that would be greatly appreciated..

    The sympotons of my problems are :-

    Pop ups from websites such as Ebay/Windows/Casino ect ect
    and i also think my puter is taking much longer to do anything (even opening up a page is taking a lot longer now)..

    any help would be muchly appreciated...


    Grant
     
  2. tomrca

    tomrca TS Rookie Posts: 1,000

    have hjt fix these. O2 - BHO: (no name) - {F974FD6A-CD45-4D27-BF84-2436408FC66B} - C:\WINDOWS\system32\jkkhigg.dll
    O2 - BHO: (no name) - {8A4A030B-3EE8-4588-A5FD-4C615568E44B} - C:\WINDOWS\system32\mllmn.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O20 - Winlogon Notify: jkkhigg - C:\WINDOWS\SYSTEM32\jkkhigg.dll
    O20 - Winlogon Notify: mllmn - C:\WINDOWS\system32\mllmn.dll

    if you do not recognise these, fix too.
    O16 - DPF: {326A7290-FAE3-48C5-9FBA-F071633E1EB5} (VPlayer Control) - http://www.flashbeer.com.au/player/vivid_ocx.jpeg
    O17 - HKLM\System\CCS\Services\Tcpip\..\{77C700E3-922A-455C-8D85-47750EEAC9D8}: NameServer = 192.189.54.33,192.189.54.17
    download backlight from HERE follow instructions. then post fresh hjt
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Do not fix the 017 entry, otherwise your internet may stop working.

    Download Vundofix from HERE.

    Double click the Vundofix.exe to run it.

    Right click in the vundofix window and click add files.

    Enter the full file path/s to the files you want Vundofix to delete and click the add files button, followed by the close window button. Click the remove vundo button and let Vundofix do it`s stuff.

    These are the filepaths you need to enter into Vundofix.

    C:\WINDOWS\system32\mllmn.dll
    C:\WINDOWS\system32\jkkhigg.dll

    Post a fresh HJT log, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  4. volt

    volt TS Rookie Topic Starter

    Hi there - sorry so long to reply

    I think there may be a time dif from were im residing.

    Unfortunately i deleted the file your said not to, but after ringing my ISP they where able to fix it up for me (*i truly am a simpleton when it comes to computer related issues)

    Ok then - ive done the new scan - and have posted the new HJT log.

    thanks so much for all your support.




    Grant
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {171FF5C5-B7A7-468D-A566-DE9922526241} - C:\WINDOWS\system32\mllmn.dll (file missing)

    O2 - BHO: (no name) - {F974FD6A-CD45-4D27-BF84-2436408FC66B} - C:\WINDOWS\system32\jkkhigg.dll (file missing)

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    Click on the fix checked button.

    Close HJT and reboot your system.

    Other than the above, your HJT log is clean.

    I suggest you consider installing one of the free firewall programmes in this thread HERE.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  6. volt

    volt TS Rookie Topic Starter

    Thank you so much for that - i can't begin to express my gratitude.

    I have included another HJT log - just in case i have missed something - but im pretty sure i was able to get everything.


    Hmmmm - my puter is saying that it has a firewall already installed and in use...NOD32


    Thanks again so much.




    Grant
     
  7. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    In that case, don`t worry about the firewall then lol.

    Your HJT log is as clean as a whistle.

    Regards Howard :)

    This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...