TechSpot

My first time posting a HijackThis log

By Driver21
Dec 13, 2005
  1. Hello

    I hope somone can help me with this log.

    I´ve been trying for hours to get rid of smitfraud (I think)

    Anyway can you point me in the right direction.

    Thanks
     
  2. Mictlantecuhtli

    Mictlantecuhtli TS Evangelist Posts: 4,345   +11

    End these processes with Task Manager (or similar tool):

    C:\WINDOWS\d3tb.exe
    C:\WINDOWS\msjr32.exe

    Then fix these:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\xwhvu.dll/sp.html#37049

    O2 - BHO: Class - {452F1EE7-C91B-B623-8E14-7CE36CAC51A7} - C:\WINDOWS\system32\addvw32.dll
    O2 - BHO: Class - {5A3D985D-E7F0-92FD-318F-8930CFEB6D7E} - C:\WINDOWS\system32\appkq.dll (file missing)
    O2 - BHO: Class - {98B06E7B-7D84-30CB-A991-794990630F1F} - (no file)

    O4 - HKLM\..\Run: [d3tb.exe] C:\WINDOWS\d3tb.exe

    O14 - IERESET.INF: START_PAGE_URL=http://www.bt.is/
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Workstation NetLogon Service ( 11F�#�`I) - Unknown owner - C:\WINDOWS\msjr32.exe

    Unless your DNS server is supposed to be 192.168.1.1, fix this:

    O17 - HKLM\System\CCS\Services\Tcpip\..\{6F07E577-052F-4EC6-99B2-A93560AEC254}: NameServer = 192.168.1.1
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...