View Single Post
Old 08-27-2007, 08:08 PM   #2 (permalink)
Pancake
Security Team (ret.)
 
Pancake's Avatar
 
Join Date: Nov 2003
Location: Victoria.Australia
Posts: 7,405
OS: XP Pro SP3


Re: Very Slow and IE popups

Hi there..



Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O4 - HKLM\..\Run: [Microsoft Help Service] scvhost.exe
O4 - HKLM\..\Run: [Jugs Surf Inter Media] C:\Documents and Settings\All Users\Application Data\STORE LESS JUGS SURF\that bait.exe
O4 - HKLM\..\Run: [corn dvd inside media] C:\Documents and Settings\All Users\Application Data\Balm Seek Media Store\flaw less bold.exe
O4 - HKLM\..\RunServices: [Microsoft Help Service] scvhost.exe
O4 - HKCU\..\Run: [flap delete] C:\DOCUME~1\PCWORL~1\APPLIC~1\PLATFO~1\bibaxisrdr.exe



Close all windows except HijackThis and click "Fix Checked".
Please Download NoLop to your desktop from one of the links below...

Link 1
Link 2
Link 3
  • First close any other programs you have running as this will require a reboot
  • Double click NoLop.exe to run it.
  • Carefully type or copy and paste this series of characters into the lower text area labeled Insert CLSID Here.
Include the {}:
{CLSID GOES HERE}
  • Now click the button labeled "Search and Destroy"
    <<your computer will now be scanned for infected files>>
  • When scanning is finished you will be prompted to reboot only if infected, Click OK
  • Now click the "REBOOT" Button.
  • A Message should popup from NoLop. If not, double click the program again and it will finish.
Please Post the contents of C:\NoLop.log along with a fresh HijackThis log

--If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program.
__________________
Eddy

Last edited by Pancake : 08-27-2007 at 08:09 PM.
Pancake is offline