HijackThis Log

By Kez
Oct 6, 2005
  1. Could you please look at my friends log for him please, i recognised a few things that might of needed removing but was unsure, so brought it here for you all to have a look at.

    Thanks in advance.
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    This is the rubbish:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mklfgiicwmehosbb.org/Su1...cP0kjuaETdmrDZHwvuGaq1bO0TtgHsVwCR1zgwXU.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.vpypnkvxrhthzecnn.com/Su1Z/dY3tz4Tc6ZpYpwvU0850ZQF_eitAwmUzstoitU.jsp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\uk.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.co.uk/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=ZillaPopupKiller:8100
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
    O2 - BHO: (no name) - {C819861B-E2B6-E3B4-BE07-6A9326B6591A} - C:\DOCUME~1\Cain\APPLIC~1\MORETR~1\Deadwma.exe
    O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)
    O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [BPT] "C:\Program Files\Bpt\bpt.exe"
    O4 - HKLM\..\Run: [defaultlogoidolpart] C:\Documents and Settings\All Users\Application Data\Webdeafdefaultlogo\heckbind.exe
    O4 - HKCU\..\Run: [Atom owns] C:\DOCUME~1\Cain\APPLIC~1\FLAWID~1\FlapAbout.exe
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
    fix all O16 - DPF:
    Unless you know these IPs, fix O17
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7A89A6FA-427F-4164-9F31-9E589BC70597}: NameServer =
    O20 - AppInit_DLLs: MsgPlusLoader.dll
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...