HijackThis log help plz

[jimmysmalz]

I have been unable to open my taskmanager through Ctrl+Alt+Delete or by right-clicking my taskbar.

Also Shareaza runs as soon as I open Windows and will re-open after I close the program

View attachment 13788

 

[tomrca]

hi there. well !!! you have lots to repair. you have no obvious antivirus or firewall programmes go get the free firewall from HERE and the free avg antivius programme first. then GO HERE (after accessing this link, it may be worth printing the instructions if you have the ability) and read the instructions. after this you will need to rename hijack this to analyser 1991, place in its own folder within prog files. then do a scan with it and post the fresh hjt log and avg anti-spy-ware log.
it is very important that you follow the instructions as closely as possible. see you soon.
by the way jimmysmalz, welcome to techspot:grinthumb

you have a hijacker and more

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your system is badly infected with all kinds of nasties.

Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

If after reading the above, you wish to clean your system, do the following.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of jimmysmalz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[jimmysmalz]

Updated HJT log

First I just wanna thank both of your for your help, my pc's running much better. I followed all the instructions above and here is my updated HJT log

 

[howard_hopkinso]

Your system is still infected. I asked you to post an AVG Antispyware log, please do so in your next reply.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.


Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

JXE.exe
BLUH.exe
vjkfs.exe
wupdater.exe

Close task manager.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank

O2 - BHO: PopThis! BHO - {0549E6CB-9985-42F6-8FD6-4EC017E6AAE1} - C:\Program Files\mathies.com\PopThis!\PopThis.dll (file missing)

O2 - BHO: (no name) - {0A1357F4-9219-4B53-AAA6-C48DDD666875} - C:\WINDOWS\System32\acliui.dll (file missing)

O2 - BHO: (no name) - {4A0372D8-D613-6E48-9682-3430F9356CFD} - C:\WINDOWS\Xojidqwi.dll (file missing)

O3 - Toolbar: (no name) - {EB7FD4E8-D794-4B24-95A9-8BD094CBB46D} - (no file)

O3 - Toolbar: SuperBar - {63BA6984-A34B-4737-866E-748FB498A97A} - C:\Program Files\SUPERBAR\SUPERBAR.dll (file missing)

O3 - Toolbar: Search - {8BFF094A-0176-F93B-E76E-0F0ABD385929} - C:\WINDOWS\Xojidqwi.dll (file missing)

O4 - HKLM\..\Run: [JXE] C:\WINDOWS\JXE.exe

O4 - HKLM\..\Run: [BLUH] C:\WINDOWS\BLUH.exe

O4 - HKLM\..\Run: [HBr5OnZ] C:\WINDOWS\vjkfs.exe

O4 - Global Startup: updater.lnk = C:\Program Files\Common Files\updater\wupdater.exe

O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/1452/ftp.coupons.com/r3302/cpbrkpie.cab

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\Program Files\Common Files\updater\wupdater.exe
C:\WINDOWS\JXE.exe
C:\WINDOWS\BLUH.exe
C:\WINDOWS\vjkfs.exe

Reboot into normal mode and rehide your protected OS files.

Post fresh HJT and AVG Antispyware logs.

Regards Howard

This thread is for the use of jimmysmalz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.