TechSpot - PC Technology News and Analysis

Here is my Hijackthis logfile as an attachment.
I have scanned a few times and some of the files I am deleting are returning.
My computer is running as slow as i have ever seen it and it was difficult just to post this thread.
Any assistance would be appreciated, thank you.
dave

The bottomr right corner of my screen has this "search the web" box that I cannot get rid of (unless I open the task manager) and manually stop it.
thanks again

Attached Files

newlogfile.txt (5.1 KB, 6 views)

Move your Hijackthis to its OWN directory, e.g. C:\Program Files\hjt

Boot in Save Mode
Switch off your Restore Points
Press ctrl/alt/del and in Taskmanager try to STOP these processes:
msupd4.exe
k95y0d0o.exe
hpdll.exe
kyk.exe
desktop.exe
wsxsvc.exe
lmrredir.exe
winupdt.exe
ffisearch.exe
Ssk.exe

Next, try to UNinstall anything to do with:
C:\Program Files\SurfSideKick 2\Ssk.exe

Run HJT with NO other programs open and let it 'fix' (if still there):
C:\WINDOWS\System32\msupd4.exe
C:\Program Files\k95y0d0o\k95y0d0o.exe
C:\Program Files\hpdll\hpdll.exe
C:\WINDOWS\system32\kyk.exe
C:\WINDOWS\isrvs\desktop.exe
C:\WINDOWS\System32\wsxsvc\wsxsvc.exe
C:\WINDOWS\System32\lmrredir.exe
C:\WINDOWS\System32\winupdt.exe

R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\Program Files\SurfSideKick 2\SskBho.dll
O2 - BHO: SDWin32 Class - {194360A4-9D0E-41CA-8496-D7D80AEF65A9} - C:\WINDOWS\System32\xvhmq.dll
O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
O2 - BHO: (no name) - {EC1B62A7-2242-9F58-6C15-465DD999770D} - (no file)
O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
O4 - HKLM\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O4 - HKLM\..\Run: [kyk] C:\WINDOWS\system32\kyk.exe
O4 - HKCU\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O9 - Extra button: Your PC is infected with Spyware - click here to fix your PC - {FB74C951-ACA1-4e33-A94C-A9261EB2CCB7} - https://www.spydeleter.com/order2.php?KBID=1062 (file missing)
O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
O23 - Service: Miscrosoft Updates Service 4 - Unknown - C:\WINDOWS\System32\msupd4.exe

When done, delete the bold files. When a directory is also bold, delete everything in it, including that directory itself.

Report back with a new log if you still have problems.

This is the second time in a few days that you come with crap like this. Isn't it time you change your surfing habits? You should be a LOT MORE responsible as to what you look at on the web!