8 step results

[chris71383]

Maby somebody can help me, this is what I came up with.

 

[touch]

Hello chris71383

Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe
And save to the desktop.

Close all other browser windows.

Double-click on the combofix icon found on your desktop.

Please note, that once you start combofix you should not click anywhere on the combofix window as it can cause the program to stall. In fact, when combofix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

 

[chris71383]

Here are the results from the combofix scan

 

[touch]

Open notepad and copy/paste the text in the quotebox below into it:
Name the file as CFScript
and Save it on the desktop

Killall::
Snapshot::
File::
c:\windows\system32\rinhlqls.exe
Folder::
c:\documents and settings\Chris\Local Settings\Application Data\Shareaza
c:\documents and settings\Chris\Application Data\Shareaza
c:\documents and settings\Chris\Local Settings\Application Data\Ares
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"rinhlqls"=-

http://www.fromsej.saknet.dk/billeder/cfscript.gif

Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

 

[chris71383]

here ya go, thanks for the help.

 

[touch]

It looks clean. How are things running now ?

 

[chris71383]

no more pop ups, but still getting multiple iexplore.exe in task manager eating up a ton of resources.

 

[touch]

Ok. Please attach new hijackthis log.

 

[chris71383]

here is the new log

 

[touch]

It´s normal that IE 8 creates multiple instances of the iexplore.exe processes.

How many ram are there in the computer ?

 

[chris71383]

currently 2 GB

 

[touch]

It should be enough.

Download: DelDomains.inf
http://mvps.org/winhelp2002/DelDomains.inf,
and save it to the desktop.

Close all open browsers
Right-click DelDomains.inf and select: Install

Reboot, and tell if IE8 still are using lot of resources ?

 

[chris71383]

Better, now when I open Internet explorer I only get 2 insances poping up in task manager.

 

[touch]

That´s normal with IE8

 

[chris71383]

ok, cool. Thank you very much for all of your help.

 

[touch]

You´re welcome


Click START then RUN
Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
When shown the disclaimer, Select "2"
The above procedure will:
Delete the following:
ComboFix and its associated files and folders.
Reset the clock settings.
Hide file extensions, if required.
Hide System/Hidden files, if required.
Set a new, clean Restore Point.

To learn more about how to protect yourself while on the internet, please read Tony Klein´s guide:How did I get infected in the first place?