Could someone check this HJT log please?

Status
Not open for further replies.
My sisters aren't geniuses when avoiding viruses and so of course every time I check on their computer it's got a few bugs, but now it's quite bad.
It blue screens every few minutes citing different errors but none of my scanners are turning anything up. I've run Avira, Spybot, and AVG to no avail, any suggestions?
 
Please go to this website and follow the 8-step program to remove spyware malware from your computer. You may be tempted to bypass different steps. I would recommend you resist temptation. After accomplishing this I would recommend you go to this website to get a preliminary evaluation as to the condition of your OS after the scans and other activities have been accomplished. http://hjt.networktechs.com/parse.php at this site you are able to cut and paste your hijackthis! logs into it and click a button that reads "parse" and out comes preliminary diagnostics on the condition of your OS.

Regards.
 
Your Root folder has been renamed C:\WINDOWS1. It should be C:\WINDOWS

These entries can be removed
O4 - HKLM\..\Run: [lphcg4nj0ec47] C:\WINDOWS1\system32\ lphcg4nj0ec47.exe
O4 - HKLM\..\Run: [SMrhcl4nj0ec47] C:\Program Files\rhcl4nj0ec47\rhcl4nj0ec47.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
You can remove the above by running HJT. Select the two entries then click "fix checked".
Note: Make sure that all other program windows are closed.

The entries are associated with Anti-vVrus Xp.
You should navigate to the following Directories and remove containing folder.

Navigate to C:\WINDOWS1\system32 ( Delete lphcg4nj0ec47.exe)

Navigate to C:\Program Files ( Delete the rhcl4nj0ec47 folder)

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe - This can be removed as it is no longer supported, also you should update Adobe acrobat reader to version 9.0; https://www.techspot.com/downloads/2083-adobe-reader-dc.html

Follow the instruction found at this link https://www.techspot.com/community/topics/updated-4-step-viruses-spyware-malware-removal-preliminary-instructions.58138/, then return here and post the logs
 
Note: Please also check that you only have ONE windows folder. Ensure that you have set all folders and files to unhidden before you check. If there exists two (ie a windows1) delete the entire Windows1 folder.

Also, your hijackthis is outdated. Download the latest version 2.02
 
Status
Not open for further replies.
Back