Dan

Members
  • Content Count

    742
  • Joined

  • Last visited

Posts posted by Dan

  1. Hi sparklez331,

    Open HijackThis, press "Scan" and check the following items:

    O4 - HKLM\..\Run: [lmu] C:\WINDOWS\LMU.exe

    O23 - Service: ZESOFT - Unknown - C:\WINDOWS\zeta.exe (file missing)

    Here are some optional fixes in HijackThis:

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    System Tray access to Apple's Quick Time viewer from version 5 onwards. Needs to be turned off within the program.

    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

    System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling StartCenter via Preferences.

    Close all windows except HijackThis, and click the "Fix Checked" button.

    Reboot into Safe Mode. To do this:

    * During reboot immediately begin tapping the F8 key

    * Windows Advanced Options menu appears.

    * Use the arrow keys to select Safe mode

    * press Enter.

    When safe mode loads up, find the following files and delete them:

    C:\WINDOWS\LMU.exe

    C:\WINDOWS\zeta.exe

    Reboot and post a new log.

    dk :)

  2. I was just wondering what is the formula for words per minute and how to put it in a spreadsheet??

    I my spreadsheet is like this so far:

    A1= # of Words    B1= X

    A2= WPM            B2= X

    A3= Time            B3= Formula???

    So B1, and B2 is the # of words and WPM.....

    If anyone could tell me what to put in B3, that would be great!

    dk :)

  3. Hi cheszekiah,

    Sorry for the delay. I will be assisting you with your HijackThis log.

    Open HijackThis, click the "Scan" button, and check the following files:

    R3 - Default URLSearchHook is missing

    O4 - HKCU\..\Run: [Wdmgdh] C:\WINDOWS\system32\n?tepad.exe

    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312...meInstaller.exe

    Here are some optional fixes in HijackThis:

    O4 - Startup: PowerReg Scheduler V3.exe

    A registration reminder from Leadertech, and is considered spyware by many experts.

    Close ALL windows except HijackThis, and click "Fix Checked"

    Reboot. Then click Start --> Find. Find the following file:

    n?tepad.exe

    For all of those files that you find, right-click on the applications (.exe) and select properties.

    In the properties look at the file types. Record your findings.

    Finally, post a new log, WITH your findings of the properties.

    dk :)

  4. Hi murtu52,

    I will be reviewing your log today.

    Open HijackThis, click the "Scan" button, and check the following files:

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)

    O9 - Extra button: (no name) - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - (no file)

    O9 - Extra button: (no name) - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - (no file)

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O23 - Service: FAH@C:+Download+FAH502-Console.exe - Unknown - C:\Download\FAH502-Console.exe (file missing)

    Here are some optional fixes in HijackThis:

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    System Tray access to Apple's Quick Time viewer from version 5 onwards -- Note: This needs to be turned off within the program.

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    Application Scheduler installed along with RealOne Player . Once installed it runs independently of RealOne Player. -- Note: This needs to be turned off within the program

    O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe

    Checks for updates to MS Works.

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog and some users claim there's no difference with or without it but it usually isn't required.

    Close all windows except HijackThis, and click the "Fix Checked" button.

    Reboot into Safe Mode. To do this:

    * During reboot immediately begin tapping the F8 key

    * Windows Advanced Options menu appears.

    * Use the arrow keys to select Safe mode

    * press Enter.

    When Safe Mode boots up, find the following file and delete it:

    C:\Download\FAH502-Console.exe

    Reboot into normal mode, and post a new log.

    dk