therock247uk

1. Ok open Hijackthis and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.fdwkjtidbzrhmcggqgcxiv.com/OXyx...3RExiWFfBO.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fovtsckjwugaan.net/OXyxLknVMs/9.../YuGsKzCno.html O2 - BHO: (no name) - {F7E1CF3A-557A-24D8-95FF-8473E7A26E10} - C:\DOCUME~1\ADMINI~1\APPLIC~1\MFCDVI~1\cakebin.exe O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINNT\FVProtect.exe O4 - HKLM\..\Run: [driveokaydebugstyle] C:\D

I dont see any baddies there you could fix these lines in Hijackthis tho. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - (no file) But as i said i dont see anything bad there.

The log looks clean lots of AOL crap there but it looks clean. What do you mean computer acting weird?

That log looks clean here What problems are you having?

1. Please post a new current log here in a reply as i cant tell which log above is the current one.

1. Ok open Hijakckthis and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R3 - Default URLSearchHook is missing O2 - BHO: MultiMPPObj Class - {002EB272-2590-4693-B166-FBD5D9B6FEA6} - C:\WINDOWS\multimpp.dll O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing) O2 - BHO: No description - {88CC91DE-5930-45AD-9E04-6B1233609FEA} - C:\WINDOWS\System32\qem1D77.dll O4 - HKLM\..\Run: [zyh] C:\WINDOWS\zyh.exe O4 - HKLM\..\Run: [

Thanks alot!

Log looks clean how is the PC?

1. Ok open Hijackthis and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.e-finder.cc/search/ (obfuscated) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.e-finder.cc/search/ (obfuscated) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.e-finder.cc/search/ (obfuscated) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home R1 - HKLM\Software\Microsoft\Internet Explorer\Main,

Woah what an old version of Hijackthis you have. Can you please download a newer Hijackthis version 1.98.2 from http://www.spywareinfo.com/~merijn/files/hijackthis.zip Unzip it into a permanent folder like c:/hjt and post a new Hijackthis log here in a reply from it.

Which programs are running in the taskbar?

Still having any problems?

1. Move Hijackthis to a permanent folder like c:/hjt. 2. Open Hijackthis from c:/hjt and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/...rch/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm O3 - Toolbar: Anonymous Browsing - {14B0D0D3-D1E6-4BF6-9EEF-F050527D607D} - (no file) 3. Then post a new Hijackthis log here in a reply.

1. This line is optional but it does take you to a site that will try and download bad things onto your computer so open Hijackthis and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html I recommened you Uninstall Aluria Spyware Eliminator. As the company Aluria has joined with WhenU. Here is a good link to read About what they did. http://forums.tomcoyote.org/index.php?showtopic=20626 I dont see ncase in your log.

No problem Go here for Infomation on how to prevent Reinfection. http://forums.net-integration.net/index.php?showtopic=3051

Log is clean That Searchbar gone?

1. Open Hijackthis again and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.tvirauwjxvqaoadhjydoi.biz//AuaE...Cvf3pQwfc5.html 2. Then post a new Hijackthis log here in a reply.

1. You have one of these programs running on your machine and that is good. Spybot s&d (Teatimer option) But prior to doing the fix below with Hijackthis they need to be turned off. Please do the following. Right click the running icon of Spybot's teatimer, and choose exit. Unless they are turned off they could interfer with the fix by Hijackthis. 2. Open Hijackthis and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.xclcmyohkksyefjnrymb.com//AuaEX...FCvf3pQwfc

Helped in Chat.

1. Please move Hijackthis to a permanent folder like c:/ so backups can be made. 2. Then open Hijackthis from c:/hjt and click scan. Then tick and fix the following in Hijackthis with all windows closed except Hijackthis. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.jshcahnvezclzjdr.us/J4HgDYXfpYr...Zn3MbhV0ABN.jpg O4 - HKCU\..\Run: [longbait] C:\DOCUME~1\FJS\APPLIC~1\FRAGRE~1\internetdupepure.exe 3. Reboot and delete the folders. C:\Documents and Settings\FJS\Application Data\FRAGRE~1\ < Folder starts with FRAGRE 4. Then post a new Hijackthis log here in a re

What problem are you having with the Web search Results?

Its best to leave them lines alone.

Log is clean What problems are you having?

Ok your log is clean Go here for Infomation on how to prevent Reinfection. http://forums.net-integration.net/index.php?showtopic=3051

Ok your log is clean You may want to fix this in Hijackthis as people have reported it sends Infomation about what you do. O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE Go here for Infomation on how to prevent Reinfection. http://forums.net-integration.net/index.php?showtopic=3051