I have a trojan i think

[volt]

Hi there everyone,

Im so sorry if i sound really stupid - but im not all that computer smart - and have tried my best to follow all the instructions in the viruses-spyware-mal ect thread..

Ive done all that was written, except for the VundoFix - which i did download and try to scan - but after about 10 minutes, it would come up saying that it was not responding ????

I think this all initaily started to happen when i downloaded the new version of MSN msger (*thats just when i first noticed it though).

Also - the anti-virus i generally use is NOD32 (*but i did download AVG top do those scans).

If i could get any help that would be greatly appreciated..

The sympotons of my problems are :-

Pop ups from websites such as Ebay/Windows/Casino ect ect
and i also think my puter is taking much longer to do anything (even opening up a page is taking a lot longer now)..

any help would be muchly appreciated...


Grant

 

[tomrca]

have hjt fix these. O2 - BHO: (no name) - {F974FD6A-CD45-4D27-BF84-2436408FC66B} - C:\WINDOWS\system32\jkkhigg.dll
O2 - BHO: (no name) - {8A4A030B-3EE8-4588-A5FD-4C615568E44B} - C:\WINDOWS\system32\mllmn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O20 - Winlogon Notify: jkkhigg - C:\WINDOWS\SYSTEM32\jkkhigg.dll
O20 - Winlogon Notify: mllmn - C:\WINDOWS\system32\mllmn.dll

if you do not recognise these, fix too.
O16 - DPF: {326A7290-FAE3-48C5-9FBA-F071633E1EB5} (VPlayer Control) - http://www.flashbeer.com.au/player/vivid_ocx.jpeg
O17 - HKLM\System\CCS\Services\Tcpip\..\{77C700E3-922A-455C-8D85-47750EEAC9D8}: NameServer = 192.189.54.33,192.189.54.17
download backlight from HERE follow instructions. then post fresh hjt

 

[howard_hopkinso]

Hello and welcome to Techspot.

Do not fix the 017 entry, otherwise your internet may stop working.

Download Vundofix from HERE.

Double click the Vundofix.exe to run it.

Right click in the vundofix window and click add files.

Enter the full file path/s to the files you want Vundofix to delete and click the add files button, followed by the close window button. Click the remove vundo button and let Vundofix do it`s stuff.

These are the filepaths you need to enter into Vundofix.

C:\WINDOWS\system32\mllmn.dll
C:\WINDOWS\system32\jkkhigg.dll

Post a fresh HJT log, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[volt]

Hi there - sorry so long to reply

I think there may be a time dif from were im residing.

Unfortunately i deleted the file your said not to, but after ringing my ISP they where able to fix it up for me (*i truly am a simpleton when it comes to computer related issues)

Ok then - ive done the new scan - and have posted the new HJT log.

thanks so much for all your support.




Grant

 

[howard_hopkinso]

Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: (no name) - {171FF5C5-B7A7-468D-A566-DE9922526241} - C:\WINDOWS\system32\mllmn.dll (file missing)

O2 - BHO: (no name) - {F974FD6A-CD45-4D27-BF84-2436408FC66B} - C:\WINDOWS\system32\jkkhigg.dll (file missing)

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

Click on the fix checked button.

Close HJT and reboot your system.

Other than the above, your HJT log is clean.

I suggest you consider installing one of the free firewall programmes in this thread HERE.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[volt]

Thank you so much for that - i can't begin to express my gratitude.

I have included another HJT log - just in case i have missed something - but im pretty sure i was able to get everything.


Hmmmm - my puter is saying that it has a firewall already installed and in use...NOD32


Thanks again so much.




Grant

 

[howard_hopkinso]

my puter is saying that it has a firewall already installed and in use...NOD32

In that case, don`t worry about the firewall then lol.

Your HJT log is as clean as a whistle.

Regards Howard

This thread is for the use of volt only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.