HJT scan log need help w/

[MJordan20]

Can someone please review & tell me of any threats and or un-needed programs or applications I have. Any input is appreciated, thank-you. :monkey:

 

[swker98]

beware you will only get help if you poost this as an attchment
have a nice day

 

[howard_hopkinso]

Hello and welcome to Techspot.

Please edit you post, and remove your HJT log.

Go HERE and have your computer scanned.

Then, go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.

Then see. How to post your Hijackthis log-file as an ATTACHMENT. Post a fresh HJT log after following the above instructions.

Regards Howard :wave: :wave:

 

[howard_hopkinso]

Boot into safe mode, and turn off system restore.

Go to add remove programmes in your control panel, and uninstall anything to do with the following(if there)

C:\Program Files\winupdates\winupdates.exe
C:\Program Files\LimeWire\LimeWire.exe

Then close your control panel.

Open your task manager, if you can, and click on the processes tab. End process for(if there)

winupdates.exe
d?xplore.exe
LimeWire.exe

Close task manager.

Run HJT with no other programmes open, and let HJT fix the following(if there)

R3 - Default URLSearchHook is missing

O2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dll
O2 - BHO: (no name) - {49D93528-9165-21BB-D753-61550B807B3B} - C:\WINDOWS\System32\qwiid.dll (file missing)
O2 - BHO: (no name) - {A279B365-0684-282A-8493-72A2D9F56691} - C:\WINDOWS\System32\arsp.dll (file missing)

O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKCU\..\Run: [Sos] C:\WINDOWS\System32\d?xplore.exe

O15 - Trusted Zone: *.05p.com (HKLM)
O15 - Trusted Zone: *.scoobidoo.com (HKLM)
O15 - Trusted IP range: 206.161.124.130 (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)

Fix all your 016 DPF entries.

Also, fix this if it doesn`t belong to your ISP.
O17 - HKLM\System\CCS\Services\Tcpip\..\{E35E60ED-9856-4D8A-98B8-7FB9CD97230C}: NameServer = 205.188.146.145

Close HJT.

Delete the following bold files(if there)

C:\Program Files\winupdates\winupdates.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\WINDOWS\System32\d?xplore.exe

Reboot into normal mode, and turn system restore back on.

Regards Howard

 

[computer help]

extra advice

dowmload and install this avast ------> http://www.download.com/Avast-Home-Edition/3000-2239_4-10375520.html?tag=lst-0-1


dowload and instal this adaware se ------> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1


:wave: