Need Help to Remove Bad Image DLL messages

Status
Not open for further replies.
I believe my computer is infected with a Bad Image Dll virus. I have attached the logs for an expert's review. I appreciate it very much if an expert would review them and let me know which entries should be removed.

I don't know how to uninstall a Chinese P2P program; such uninstallation was suggested by the 8-step viruses preliminary removal instructions.
 

Attachments

  • mbam-log-2009-10-17 (13-22-36).txt
    852 bytes · Views: 5
  • SUPERAntiSpyware Scan Log - 10-17-2009 - 14-31-33.log
    1.6 KB · Views: 5
  • hijackthis.log
    13.2 KB · Views: 6
Many suspicious entries are in your hijackthis log:
"O20 - AppInit_DLLs: 4p3fs8pter6j4x1.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll"...
"R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch"...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch"...
"R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch"...
"O2 - BHO: IEBtnHlprObj Class - {922C93CD-8B92-485a-8B40-F9DB7E0984A5} - (no file)"...
"R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL"...
"O4 - HKLM\..\Run: [¼«ËÙ¿á6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
O4 - HKLM\..\Run: [???6] "C:\Program Files\¿á6Íø\¼«ËÙ¿á6\Ku6SpeedUpper.exe" /start"...
"O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN"...
"O4 - Global Startup: winlogin.exe"...
"O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab"...
"O24 - Desktop Component 0: (no name) - (no file)"...


You may still have an active Trojan virus on your computer. Remove these lines in the hijack log
 
Status
Not open for further replies.
Back