My hijackthis log

Status
Not open for further replies.
Boot in Safe Mode
Switch off System Restore
Run Hijackthis on its own and have it 'fix':

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\sp.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\sp.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {99D48BF1-6BEA-41DA-A8DF-23E8CE36CDFE} - C:\WINDOWS\SYSTEM\KFKFMB.DLL
O4 - Startup: HP Setup.lnk = C:\WINDOWS\TEMP\hpcdtemp\sulaunch.exe
O16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.68/EVqIL8LT4intLrNbYja7.chm::/on-line.exe
O18 - Filter: text/html - {98B59560-3E75-4D0F-A14B-9ECF955654AF} - C:\WINDOWS\SYSTEM\KFKFMB.DLL
O18 - Filter: text/plain - {98B59560-3E75-4D0F-A14B-9ECF955654AF} - C:\WINDOWS\SYSTEM\KFKFMB.DLL

When done, delete:
C:\WINDOWS\SYSTEM\KFKFMB.DLL
ALL files and directories from C:\WINDOWS\TEMP
Clean your temp. Internet Files and all your cookies.

Install Firefox from www.getfirefox.com and use IE only for windoze-updates from now on.
 
Status
Not open for further replies.
Back