Pakes.U, Toolbar888, TrojanDownloader HELP

[Jaexyn]

Hi there. I've got a few trojan issues that I was wondering if you could help with. The PakesU, Toolbar888, and TrojanDownloader are the ones that are getting me. I've done everything that was in the "Please read this before posting" thread including downloading and running Ewido, the 4 tools, and the safe start thing. Attached are my HJT report, Ewido report, and VBG report. Could you please look these over and offer any advise you might have. Thank you in advance.

~Jae

 

[howard_hopkinso]

Hello and welcome to Techspot.

Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O17 - HKLM\System\CCS\Services\Tcpip\..\{1B78A81C-D99B-4E92-9BDE-8DFB36A79AF3}: NameServer = 68.94.156.1 68.94.157.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC8B207D-3E20-4CDF-A7E5-BEA50BDAA4C0}: NameServer = 68.94.156.1,68.94.157.1

Only fix the above 017 entries, if they don`t belong to your ISP.

Fix all 018-Protocol entries.

O20 - Winlogon Notify: winprb32 - winprb32.dll (file missing)

Click on the fix checked button.

Close HJT.

Delete all files in Ewido quarantine.

Other than the above none dangerous entries, your HJT log is clean.

If you have any further virus/spyware problems, pleas post in this thread.

Regards Howard :wave: :wave:

This thread is for the use of Jaexyn only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.