h91746.exe Removal

[tmwight]

Can anyone help me remove the h91746.exe please? I ran HijackThis and the log follows. Please let me know.

Thanks

 

[howard_hopkinso]

Hello and welcome to Techspot.

Go HERE and follow the instructions.

Then, go HERE and do likewise.

Once you`ve done that, go HERE and follow all the instructions exactly.

Post a fresh HJT log, only after doing the above.

Regards Howard :wave: :wave:

 

[tmwight]

Okay, here's the new HJT log.

 

[howard_hopkinso]

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programmes in your control panel. Uninstall any thing to do with(if there).

MSN Toolbar Suite

Close control panel.

Click start/run and type regsvr32 /u C:\WINDOWS\SYSTEM32\winbue32.dll into the runbox and press the enter key.

Do the same for this as well. C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

Open your task manager and click on the processes tab. End process for(if there).

Admin.exe
msnindex.exe

Close task manager.

Run HJT with no other programmes open and let HJT fix the following(if there).

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)

O2 - BHO: Nothing - {8d83b16e-0de1-452b-ac52-96ec0b34aa4b} - C:\WINDOWS\system32\hpA886.tmp (file missing)

O2 - BHO: MSN Toolbar BHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll

O4 - Global Startup: Digital Line Detect.lnk = ?

O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe

O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O20 - Winlogon Notify: winbue32 - C:\WINDOWS\SYSTEM32\winbue32.dll

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files(if there).

C:\WINDOWS\SYSTEM32\winbue32.dll
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
C:\WINDOWS\system32\hpA886.tmp

Reboot into normal mode and turn system retore back on.

Now go and run the Ewido scan in the instructions I gave you.

Regards Howard