Please help with this HJT
- Thread starter dean
- Start date
- Status
howard_hopkinso
Posts: 21,238 +17
dean said:
Before posting a Hijackthis log, do the following.
Go and have you computer scanned with this online scanner Trend Houscall online scanner.
Then, go and read both these threads by RBS. Follow all the instructions exactly.
How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.
Then see. How to post your Hijackthis log-file as an ATTACHMENT.
Regards Howard
howard_hopkinso
Posts: 21,238 +17
Boot in Safe Mode, see how HERE
Switch System restore OFF, see how HERE
In Windows Explorer, turn on "show all files and folders, including hidden and system". See how HERE
Next, open Windows Task Manager by pressing CTRL+ALT+DELETE.
Click the Processes tab, select the Process (if there) and click End Process for:
shnlog.exe
intmon.exe
hp88E6.tmp
Next, run a HJT scan and (if still there) place a tick-mark in the little square before:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
O2 - BHO: HP Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\system32\hp88E6.tmp
Now click on the Fix Checked button in HJT. Exit HJT.
Now go into the following directories, C:\WINDOWS\system32, and delete if still there.
intmon.exe
shnlog.exe
hp88E6.tmp
After you have done that, please post a fresh HJT log.
Regards Howard
Switch System restore OFF, see how HERE
In Windows Explorer, turn on "show all files and folders, including hidden and system". See how HERE
Next, open Windows Task Manager by pressing CTRL+ALT+DELETE.
Click the Processes tab, select the Process (if there) and click End Process for:
shnlog.exe
intmon.exe
hp88E6.tmp
Next, run a HJT scan and (if still there) place a tick-mark in the little square before:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshibadirect.com/
O2 - BHO: HP Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\system32\hp88E6.tmp
Now click on the Fix Checked button in HJT. Exit HJT.
Now go into the following directories, C:\WINDOWS\system32, and delete if still there.
intmon.exe
shnlog.exe
hp88E6.tmp
After you have done that, please post a fresh HJT log.
Regards Howard
- Status
