HJT log

[Richard132]

basicly my home page keeps being changed and i get pop ups about registry cleanup and credit card sites... and i keep getting about 6 programs appear on my desktop like mobile phone, antivirus, love matcher etc its very annoying as they just keep reappearing.

anyways heres my log thank you in advance for any help

IV UPLOADED THE TXT FILE (THE ZIP WASNT A VIRUS BY THE WAY COZ I SEE NO 1 DL'ING IT LOL)

 

[Richard132]

My HJT log

hi me again iv uploaded the text :bounce:

 

[RealBlackStuff]

C:\Documents and Settings\Richard\Desktop\New Folder\HijackThis.exe
put HijackThis in e.g C:\Program Files\HJT and NOT on the Desktop!.

First Read: Use these HJT-instructions when asked
The text underneath goes between the dotted lines of that post.
...................................................................................................
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.uqfcewheziji.uk/cEI_y8mleQIQjas1pMzmY8Tf5XAbdYrHMcHDKbxbj6VAqD1hrIjnMP5AuD18vSv0.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.glghdvvesrup.com/cEI_y8mleQKzJ9uYQ2Y606Ln/suGrBhifbqxMe4Tr4E.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
/P/U/ O2 - BHO: (no name) - {C31A7B3E-4F8F-FF5C-7B94-914FEF6402DB} - C:\DOCUME~1\Richard\APPLIC~1\DEAFBU~1\Play delete.exe
/P/U/ O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
/P/U/ O4 - HKLM\..\Run: [bolt iso dvd ping] C:\Documents and Settings\All Users\Application Data\Tons each bolt iso\FreeRegs.exe
/P/U/ O4 - HKCU\..\Run: [dogwindow] C:\DOCUME~1\Richard\APPLIC~1\FLAPAM~1\Open that.exe
Fix ALL your O16 - DPF: entries
Unless these IP-numbers are from your ISP, fix this O17
O17 - HKLM\System\CCS\Services\Tcpip\..\{39CB019C-971A-4826-9D63-0E7F111711B6}: NameServer = 205.188.146.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
...................................................................................................

 

[Richard132]

hi sorry bout putting it on my desktop i have reinstalled HJT in program files:
here is my log. :bounce:

 

[RealBlackStuff]

That does not change the log, it's the same as before, so do as I indicated.
HJT needs its own directory, so it can make backups of the changes, in case you need to UNDO a HJT change.

 

[Richard132]

C:\Documents and Settings\Richard\Desktop\New Folder\HijackThis.exe
put HijackThis in e.g C:\Program Files\HJT and NOT on the Desktop!.

First Read: Use these HJT-instructions when asked
The text underneath goes between the dotted lines of that post.
...................................................................................................
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.uqfcewheziji.uk/cEI_y8mleQIQjas1pMzmY8Tf5XAbdYrHMcHDKbxbj6VAqD1hrIjnMP5AuD18vSv0.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.glghdvvesrup.com/cEI_y8mleQKzJ9uYQ2Y606Ln/suGrBhifbqxMe4Tr4E.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
/P/U/ O2 - BHO: (no name) - {C31A7B3E-4F8F-FF5C-7B94-914FEF6402DB} - C:\DOCUME~1\Richard\APPLIC~1\DEAFBU~1\Play delete.exe
/P/U/ O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
/P/U/ O4 - HKLM\..\Run: [bolt iso dvd ping] C:\Documents and Settings\All Users\Application Data\Tons each bolt iso\FreeRegs.exe
/P/U/ O4 - HKCU\..\Run: [dogwindow] C:\DOCUME~1\Richard\APPLIC~1\FLAPAM~1\Open that.exe
Fix ALL your O16 - DPF: entries
Unless these IP-numbers are from your ISP, fix this O17
O17 - HKLM\System\CCS\Services\Tcpip\..\{39CB019C-971A-4826-9D63-0E7F111711B6}: NameServer = 205.188.146.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
...................................................................................................

you want me to tick all the above and click fix checked? and if yes whats wrong with the windows update?

 

[RealBlackStuff]

Nothing wrong in itself, just cleaning up!
And yes, the instructions say: (if still there) place a tick-mark in the little square before:
which is for every line between the dots (if there)

 

[Richard132]

hi iv done what you asked heres my fresh log

ps: didnt fix aoltoolbar and windows update and msn plus. because i feel there important if im wrong say otherwise.

i knew that open that.exe and tons each bolt iso was something what was it?

and i dont know if those ips are my interent provider?

 

[RealBlackStuff]

That IP is from AOL.
You're wasting my time with the rest.
Either you follow all my advice or look for help somewhere else!