Need some help with start-up

Status
Not open for further replies.
I have WAY to much stuff booting up that I dont know about, and im not sure which to turn off...

if anyone could tell me which ones to turn off (by the number on the side, such as R1, or F2, etc), it'd be greatly appreciated. Thanks (Also, I used hijackthis)
 
Please save that log as .txt and upload it again.

.Doc is not a format people like to download from the internet. :)
 
boot into safe mode.

Press Ctrl+Alt+Delete and end any of the following if present...
Jumpdvd.exe
Bolt barb.exe
4 build.exe
Online Safe.exe

Uninstall if you can anything to do with...
Jumpdvd.exe
Bolt barb.exe
4 build.exe
Online Safe.exe


Uninstall anything to do with
O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll
O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O2 - BHO: (no name) - {0C6A66FF-367D-BB04-FB03-4791BB88923D} - C:\DOCUME~1\cory\APPLIC~1\MULTID~1\Jumpdvd.exe
O2 - BHO: (no name) - {57A99359-ABA3-BF5C-AD3A-5C777F5D0AF1} - C:\DOCUME~1\cory\APPLIC~1\MULTID~1\Jumpdvd.exe
O4 - HKLM\..\Run: [mp3 4 eq jugs] C:\Documents and Settings\All Users\Application Data\grim style mp3 4\Bolt barb.exe
O4 - HKCU\..\Run: [Army Plus] C:\DOCUME~1\cory\APPLIC~1\DENT1V~1\4 build.exe
O4 - HKLM\..\Run: [LogoSurfBikeDraw] C:\Documents and Settings\All Users\Application Data\Iso body logo surf\Online Safe.exe

Next, run HJT and let it fix (check the box next to it) any of the following that are still there...

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.eatwfwrrbrfka.net/MOfChFZh0fDPlztyzPgiHZQx0vjIhWpgPi6K/ZRhP6NVJiPGqipWSXA/r3KWFGg2.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xucqvxrwzewnizniyitt.info/MOfChFZh0fDDTmuYH_dPa_Hm1YUguLOLWTYRZCCB5Qs.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
O2 - BHO: (no name) - {0C6A66FF-367D-BB04-FB03-4791BB88923D} - C:\DOCUME~1\cory\APPLIC~1\MULTID~1\Jumpdvd.exe
O2 - BHO: (no name) - {57A99359-ABA3-BF5C-AD3A-5C777F5D0AF1} - C:\DOCUME~1\cory\APPLIC~1\MULTID~1\Jumpdvd.exe
O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll
O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [LogoSurfBikeDraw] C:\Documents and Settings\All Users\Application Data\Iso body logo surf\Online Safe.exe
O4 - HKLM\..\Run: [mp3 4 eq jugs] C:\Documents and Settings\All Users\Application Data\grim style mp3 4\Bolt barb.exe
O4 - HKCU\..\Run: [Army Plus] C:\DOCUME~1\cory\APPLIC~1\DENT1V~1\4 build.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
Fix ALL 016 entries.

Reboot, run a new hjt scan, and post your new log here to be checked again, and tell us who told you to post in .doc format :)
 
Status
Not open for further replies.
Back