View Single Post
Old 08-12-2007, 06:31 AM   #2 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,483
OS: N/A


Re: HJT Log - Computer Deranged

Do a HijackThis scan & place a check next to these items and select "Fix checked":

O2 - BHO: (no name) - {12D095E9-63BD-474E-8093-5497F9E870EA} - (no file)
O2 - BHO: (no name) - {66D565C4-A7C8-4A5D-AB17-B0548B81EDAF} - (no file)
O2 - BHO: (no name) - {6D55F78D-57E0-7A56-9975-02E12506D1B4} - C:\Program Files\Ayykklql\hqkkbewf.dll
O2 - BHO: (no name) - {C6039E6C-BDE9-4de5-BB40-768CAA584FDC} - C:\WINDOWS\system32\gdcfdkry.dll (file missing)
O2 - BHO: (no name) - {E7ABDD9D-2034-429C-8821-614BF73BEB77} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)
O20 - Winlogon Notify: ddayx - C:\WINDOWS\system32\ddayx.dll (file missing)
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\system32\jkkjk.dll (file missing)
O20 - Winlogon Notify: vturp - C:\WINDOWS\system32\vturp.dll (file missing)
O20 - Winlogon Notify: winlvv32 - C:\WINDOWS\SYSTEM32\winlvv32.dll


Ignore any prompts for a reboot


---------------


1. Download this file - http://download.bleepingcomputer.com...a/ComboFix.exe

* IMPORTANT !!! Place combofix.exe on your Desktop







2. Go to → Run → paste in the single line command & click OK
"%userprofile%\desktop\combofix.exe" /killall
3. When finished, it shall produce a log for you. Post that log & a fresh HJT log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
__________________

Question - what have you done for the community today?
sUBs is offline