TechSpot

Keep getting fbi-got-my-info in IE -- HJT file attached

By llpollack
Nov 8, 2005
  1. Any help would be great. I have run Spybot SD, Adaware
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    First Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    /S/ Service needs to be stopped
    /U/ UNinstall anything to do with this
    Transfer the text from between these dotted lines underneath to between the dotted lines of that post.
    Make sure to follow ALL instructions in SEQUENCE, and in HiJackThis tick/fix ALL lines!
    ...................................................................................................
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.netscape.com/home/winsearch200.html
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    /P/ O4 - HKLM\..\Run: [Win32 USB2 Driver] winsnd32.exe
    /P/ O4 - HKLM\..\Run: [REERGRUNRNT] C:\WINNT\m.exe
    /P/U/ O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    /S/ O4 - HKLM\..\RunServices: [Win32 USB2 Driver] winsnd32.exe
    O4 - HKLM\..\RunOnce: [Win32 USB2 Driver] winsnd32.exe
    O4 - HKCU\..\Run: [Win32 USB2 Driver] winsnd32.exe
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    /P/U/ O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\WEATHER.EXE 1
    O4 - HKCU\..\RunOnce: [Win32 USB2 Driver] winsnd32.exe
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm006BNUS
    Fix ALL your O16 - DPF: entries
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = psg.local
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = psg.local
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = psg.local
    Unless these IP-numbers are from your ISP, fix this O17 also
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7A982096-C3C4-4052-A692-EA36E8FD0F7E}: NameServer = 209.50.196.70,209.50.192.70
    O23 - Service: Network DDE (NetDDE) - Unknown owner - C:\WINNT\system32\netdde.exe (file missing)
    O23 - Service: Network DDE DSDM (NetDDEdsdm) - Unknown owner - C:\WINNT\system32\netdde.exe (file missing)
    ...................................................................................................

    STOP using that crappy IE (other than for Windows-updates) and install Firefox from www.getfirefox.com

    And it is HIGH TIME you install SP4!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...