TechSpot

Trojan Pakes and other nasties

By zander7526
Nov 20, 2006
  1. hi there, i was having problems with my computer showing up critical errors displaying in system tray. i have followed instructions from howard and now have a log.....(attached), please can someone tell me what i need to delete?

    i also get an error everytime i startup saying there was a problem loading (c:/windows/system32/bjhhele.dll) or that the file cannot be found. Any idea how i can also stop this.

    thanks
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    See the instructions HERE on how to post your HJT log.

    Post fresh HJT and AVG Antispyware logs into this thread.

    Regards Howard :wave: :wave:

    This thread is for the use of zander7526 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. zander7526

    zander7526 TS Rookie Topic Starter

    log..

    please find the attached log,

    thanks
     

    Attached Files:

  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I thought you said you`d already followed the instructions in the Trojan Pakes thread. If that`s the case, why aren`t you running any antivirus or firewall software? Also, you have not posted an AVG Antispyware log as I requested.

    Do The following.

    Go to add remove programmes in your control panel and uninstall anything to do with(if there).

    Perfect Codec

    Close control panel.

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    gdnFR2339.exe

    Close task manager.

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    R3 - Default URLSearchHook is missing

    O2 - BHO: (no name) - {006B5443-E2C1-4855-8DF6-A1DD1BDC2588} - (no file)

    O2 - BHO: (no name) - {230FCC99-1422-B8A0-57C6-0755281AB5BE} - (no file)

    O2 - BHO: (no name) - {52E330A3-31DD-910C-7006-0441F3212C3E} - (no file)

    O2 - BHO: (no name) - {B34B6CAB-3C8C-4FC8-B4D0-4026EBA6328B} - (no file)

    O3 - Toolbar: Protection Bar - {74a49269-9779-48b4-a0e6-3a5af2a3ade6} - C:\Program Files\Perfect Codec\iesplugin.dll (file missing)

    O16 - DPF: {3CB5FA37-0602-4E70-33BD-34C84053DDEA} - http://85.255.113.214/1/gdnFR2339.exe

    O16 - DPF: {62B6584F-0C13-4E70-A56B-33266071A70B} - http://85.255.113.214/1/gdnFR2339.exe

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - AppInit_DLLs: winlogon.dll

    O20 - Winlogon Notify: ddcyx - C:\WINDOWS\

    O20 - Winlogon Notify: jkhhf - C:\WINDOWS\

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\Program Files\Perfect Codec<Delete the entire folder.

    Reboot your computer.

    Go HERE, download, install and run antivirus and firewall programmes.

    Post fresh HJT and AVG ANTISPYWARE logs, only after doing the above.

    Regards Howard :)

    This thread is for the use of zander7526 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...