HijackThis Log - Anyone help?

[alcu]

Hi all, I'm just trying to clean up a friends laptop and have run hijackthis to try and help. I've run the app and there looks a few dodgy things but have attached the log and wonder if anyome can have a look and offer any advice?

Thanks. Paul

PS I've been following this thread:
https://www.techspot.com/vb/topic17297.html

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your friends computer is badly infected with all sorts of nasties. It is also running a completely unpatched version of Windows. If we can manage to get this computer cleaned up, it would be a very good idea, for your friend to install at least Windows service pack 1 and preferably service pack 2.

Go HERE and follow the instructions exactly.

Then, go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties. I know you`ve already read one of the above threads, but you haven`t followed the instructions properly. That`s why I want you to read the thread again.

Then, go and have your friends computer scanned HERE.

Post a fresh HJT log, only after doing the above.

Regards Howard :wave: :wave:

 

[alcu]

Further HT Post

Hi! Thanks very much for helping me out. I've done as you suggested (except the scans from the websites because the laptop is not online at the mo - I have run AVG and AdAware on it tho).

The ewido scanner seemed to do the trick and the laptop no longer tries to access the net when booting up and I can get into Task Manager now aswell.

Please find attached my latest HT log file - any further advice is much appreciated. I have XP SP2 on a disc and I'll go ahead and install this if you think all is ok now.

Cheers! Paul

 

[howard_hopkinso]

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html


Open your task manager by pressing the ctrl/alt/delete keys together. Click on the processes tab and end process for(if there).

gimmysmileys1.exe

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [gimmysmileys] C:\\gimmysmileys1.exe

Click on the fix checked button.

Close HJT.

Locate and delete the following bold file(if there).

C:\\gimmysmileys1.exe

Reboot into normal mode and turn system restore back on. The system should be clean now.

Make sure your friend installs one of the Windows service packs as I suggested in my first post.

Regards Howard

 

[alcu]

Thanks

Thanks very much for all your help - much appreciated

 

[howard_hopkinso]

No problem. Glad we could help.

Regards Howard