By vprasad007 ยท 6 replies
Jul 5, 2006
  1. Hi, i just got a new Dell notebook and am already infested with this problem. I can't remember what I installed but i was frantically surfing around the net installing a whole bunch of applications.

    I think the sysprotectionpage is the most obvious one, I do not think anything else is there as I have run Ad-aware 1.06, S&D 1.4, cwshredder and a couple other online tools several times to no respite from this sypware.

    HJT log attached. any help would be greatly appreciated.
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    You have the Smitfraud infection.

    Go HERE and follow the instructions carefully.

    Then go HERE and do likewise.

    Post a fresh HJT log after doing the above.

    Regards Howard :wave: :wave:
  3. vprasad007

    vprasad007 TS Rookie Topic Starter

    problem gone ( i think)


    I dont have sysprotectionpage as homepage anymore so thats a relief. Hope all the other spyware has gone too. attaching rapport and HJT logs.

    Thanks a lot!
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Boot into safe mode. See how HERE.

    Turn off system restore.(XP/ME only) See how HERE.

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

    Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

    O20 - Winlogon Notify: winbjt32 - C:\WINDOWS\SYSTEM32\winbjt32.dll

    O21 - SSODL: furnariidae - {89e4aaba-3b21-49b3-b922-8ca35193c68e} - C:\WINDOWS\system32\zlara.dll (file missing)

    Click on the fix checked button.

    Close HJT.

    Run HJT again, but this time click on the config button, followed by the misc tools button. Click on the delete file on reboot button and browse to C:\WINDOWS\SYSTEM32\winbjt32.dll. Click on the winbjt32.dll file and click open. You wil be prompted to restart your computer, click yes.

    Once your computer has rebooted, turn system restore back on and post a fresh HJT log.

    Regards Howard :)
  5. vprasad007

    vprasad007 TS Rookie Topic Starter

    Followed you go
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19


    Have HJT fix this entry.

    O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)

    Click on the fix checked button and close HJT.

    Once you`ve done that, your HJT log is clean.

    Regards Howard :)
  7. vprasad007

    vprasad007 TS Rookie Topic Starter


    Cheers! thanks a lot mate!
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...