Have it done for you here:
http://www.hijackthis.de/index.php
They are very much on the ball.

 

But some experts told me to use that side only as a guide only.

 

They showed you exactly what to get rid off.

BTW, strange seeing you help other people with HJT problems, and you can't fix your own?

 

Is that means you can't analyse my log file?

 

Hey RBS. What a smashing bit of kit.

Excellent find mate. Page is bookmarked.

Regards Howard

 

ok guys, thanks for ou efforts, i'll go and try my luck at another forums i guess

 

That is absolutely brilliant!!!

One thing though....

Why does it mark the Download Accelerator Plus executable as a nasty, and not give an explanation of what it is?
It wonders if the cortona vrml viewer control is a possible nasty
and It wonders if my dns servers are a possible nasty (nope! lol)

I know the free DAP verion is ad-supported, so that possibly explains that - but I do wonder whether people with little experience could use this tool. Great if you know what you're doing though.

 

Hijack This Analysis - A note for Unexperienced! This site provides an online analysis of logs but be warned that it is not to be used soley when checking logs. It gives some false positives and should only be used in conjuction with other resources and tools - as a guide only.

 

You asked, we answered.
Did you go there at all? If you had, you'd know that you are heavily infected, starting with Kazaa.

Go to this post here first, and follow the instructions EXACTLY, especially about UPDATING and HJT-location.
How to remove Begin2Search/Coolwebsearch and Other Nasties

Then see How to post your Hijackthis log-files as an attachment.

 

That's not helping...thanks anyway

 

There's probably not a lot of use in asking for help unless you're going to help yourself.

You know you're infected, because you've been told. You should know you're heavily infected by visiting the link you were given. These things alone should help. Youve been given instructions which have been proven time an time again. One of the instructions (how to post your HJT files) you should have read in the sticky at the top of the forum before posting.

It's crazy. Nobody can help you if you're not prepared to take advice and do the work.

 

Absolutely spot on Spike. I couldn`t agree with you more.

Steve05. Just follow the instructions it`s all there for you. If you can be bothered.

Regards Howard :grinthumb

 

It's doesn't makes any different isn't it? Even if i attach the log file i bet no one here are able to analyse it...sigh! Now i know why they told me not to ask for help in here...

 

It makes a lot of difference. Firstly, the how to remove begintosearch thread gets rid of a lot of rubbish.

Secondly, attaching the file makes the thread easier and quicker to read, and looks far less untidy.

Many of us even find that it takes less effort to read it in notepad tan on the forum.

If 'they' told you not to come here though, what I want to know is why 'they' haven't analysed it for you. All you've acctually shown here is that you don't want to do anything. If you follow BOTH sets of instructions, we'll do our best to help.

Almost all of those people who have followed them before now have been succesfully helped.

 

Originally posted By RBS.

Does that sound to you like no one is going to look at your log?

It`s upto you whether you follow the advice given. If you don`t want to, then of course, that`s your prerogative.

Regards Howard :suspiciou

 

OK, Mr Drama Queen. I have only about 5'000 posts because I don't help anyone, I just love to boost my number of posts. And they only made me a moderator, because I have such good looks.
My post about getting rid of Websearch nasties has only been read well over 50'000 times, because it is so bad, and nobody knows what to do.

Really? Then go get your help somewhere else...

 

As expected..
Why don't you just tell me the fixes...i prefer that way instead of reading all those spamming posts.

heh.. no heart feeling dude...chill, out! It doesn't mean this forum is lousy, it's good actually...just the ettiquette...

 

Other than *****, moan and complain, what have you done? Did you get the analysis done at that website I gave you?
As for etiquette, you getz advise, you followz up. If not, you sufferz...

 

Spamming posts? 50,000 people didn't think so! (nor the people of this board!)

You don't like the way we do things? well, you have your options - take it or leave it.

If you'd followed the advise in the first place, you'd have it all done and dusted by now. I could sit here replying for hours. Doesn't bother me - I'm not the one with an infected machine, and neither is Howard or RBS.

 

C:\WINDOWS\DELLMMKB.EXE - This is a unknown process.
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe - This is a unknown process.
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.jvhtrhgbdsrbc.net/f8hSem...aSyYWSS_p6.html - This is safe? :dead:
O2 - BHO: (no name) - {8B1F6056-7DC8-37CE-FEE6-2EE70630097A} - C:\PROGRA~1\GLUEVI~1\meow barb.exe - Unknown too??? :bounce:
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cab - Possibly nasty huh?

c'mon! You can do better than that can't you? :rolleyes:

 

steve05 if you didnt have any intentions of using the advice you got here then why bother asking and wasting others ppls time ..oh and as for you real black stuff good lookin huh :rolleyes:

 

shimmer, you don't have to flattering for the promoted, i understand your situation. This is my thread and i really don't need your spamming in here. Save your friendly advise for another pal.And i already attached the log file...still waiting for the response...

 

reply

magentayikes what side of the bed did you get out off ..who says anything about spamming get your facts right before you reply to me and as for flattering the promoter i couldnt give a monkeys toss cos hes got nothing id want lol..well ok maybe some advice

 

This is turning into a farce.

Steve05, please take your bad attitude somewhere else.

Thread closed.