Read on full site | Join TechSpot! (it's free) | Bookmark / Share this



Hijackthis logfile....please help

telex
02-02-2005, 07:21 PM
Here is my Hijackthis logfile as an attachment.
I have scanned a few times and some of the files I am deleting are returning.
My computer is running as slow as i have ever seen it and it was difficult just to post this thread.
Any assistance would be appreciated, thank you.
dave

The bottomr right corner of my screen has this "search the web" box that I cannot get rid of (unless I open the task manager) and manually stop it.
thanks again

RealBlackStuff
02-03-2005, 05:07 AM
Move your Hijackthis to its OWN directory, e.g. C:\Program Files\hjt

Boot in Save Mode
Switch off your Restore Points
Press ctrl/alt/del and in Taskmanager try to STOP these processes:
msupd4.exe
k95y0d0o.exe
hpdll.exe
kyk.exe
desktop.exe
wsxsvc.exe
lmrredir.exe
winupdt.exe
ffisearch.exe
Ssk.exe

Next, try to UNinstall anything to do with:
C:\Program Files\SurfSideKick 2\Ssk.exe

Run HJT with NO other programs open and let it 'fix' (if still there):
C:\WINDOWS\System32\msupd4.exe
C:\Program Files\k95y0d0o\k95y0d0o.exe
C:\Program Files\hpdll\hpdll.exe
C:\WINDOWS\system32\kyk.exe
C:\WINDOWS\isrvs\desktop.exe
C:\WINDOWS\System32\wsxsvc\wsxsvc.exe
C:\WINDOWS\System32\lmrredir.exe
C:\WINDOWS\System32\winupdt.exe

R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\Program Files\SurfSideKick 2\SskBho.dll
O2 - BHO: SDWin32 Class - {194360A4-9D0E-41CA-8496-D7D80AEF65A9} - C:\WINDOWS\System32\xvhmq.dll
O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
O2 - BHO: (no name) - {EC1B62A7-2242-9F58-6C15-465DD999770D} - (no file)
O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
O4 - HKLM\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O4 - HKLM\..\Run: [kyk] C:\WINDOWS\system32\kyk.exe
O4 - HKCU\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O9 - Extra button: Your PC is infected with Spyware - click here to fix your PC - {FB74C951-ACA1-4e33-A94C-A9261EB2CCB7} - https://www.spydeleter.com/order2.php?KBID=1062 (file missing)
O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
O23 - Service: Miscrosoft Updates Service 4 - Unknown - C:\WINDOWS\System32\msupd4.exe

When done, delete the bold files. When a directory is also bold, delete everything in it, including that directory itself.

Report back with a new log if you still have problems.

This is the second time in a few days that you come with crap like this. Isn't it time you change your surfing habits? You should be a LOT MORE responsible as to what you look at on the web!

Ad
02-03-2005, 05:07 AM

Post a reply, see related topics & more

 Top Technology News

11 awesome applications you've never heard of

Weekend tech reading: Windows 7 to RTM July 13?

2K Games offers "Huge Game Pack" on Steam for $54

Dell adds GPS navigation services to netbooks

News around the web: MacBook Pro's Limited Display

First iPhone 3GS jailbreak hits the web

Apple dumping Nvidia graphics on future Macs?

Packard Bell overhauls imedia desktop line

More Tech News

 Software Downloads

Zortam Mp3 Media Studio 9.40

Xplorer2 Lite 1.7.2.7

DVD Flick 1.3.0.7

McFunSoft Audio Editor 6.7.13.7

FileZilla 3.2.6.1

BitTorrent 6.2

DVD43 4.41

More Downloads




Copyright © 1998-2009 TechSpot.com. TechSpot is a registered trademark. All Rights Reserved.