That's looking better
Do you know what
C:\Documents and Settings\Jeff\My Documents\Startup.bat is for ?
Old version of HJT
You are running an older version of Hijack This.
Download
HJTinstall.exe to your desktop
It is important that you uninstall any previous versions by using Add/Remove programs in your control panel
before installing a newer version.- Double click on the HJTinstall.exe icon on your desktop.
- By default it will install to C:\Program Files\Trend Micro\Hijack This.
- Click I accept
- Click Do A System Scan Only
- When it has finished scanning put a check next to the following lines IF still present
Quote:
O2 - BHO: (no name) - {31F758F1-5DF4-495D-BBC3-1A41466F92E3} - C:\WINDOWS\system32\vtUkKDvv.dll (file missing)
O2 - BHO: (no name) - {E25EE903-37EB-467B-B1F0-F71063F6B8C8} - C:\WINDOWS\system32\ljJYQJDv.dll (file missing)
O20 - Winlogon Notify: ljJYQJDv - ljJYQJDv.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
|
- - Close ALL open windows (especially Internet Explorer!)-
- Now click Fix checked
- Click yes to any prompts
- Close HijackThis
Kaspersky Online Scanner .
Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
NOTE:- This scan is best done from IE (Internet Explorer)
Go Here
http://www.kaspersky.com/kos/eng/par...avwebscan.html
Read the Requirements and limitations before you click Accept.
Allow the ActiveX download if necessary
Once the database has downloaded, click Next.
Click Scan Settings and change the "Scan using the following antivirus database" from standard to extended and then click OK.
Click on "My Computer" and then put the kettle on!
When the scan has completed, click Save Report As...
Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.
**Note**
To optimize scanning time and produce a more sensible report for review:
- Close any open programs.
- Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
Installed Programs
Please could you give me a list of the programs that are installed.
- Start HijackThis
- Click on the Misc Tools button
- Click on the Open Uninstall Manager button.
You will see a list with the programs installed in your computer.
Click on
save list button and specify where you would like to save this file.
When you press Save button a notepad will open with the contents of that file.
Simply copy and paste the contents of that notepad into your next post.
Logs/Information to Post in Reply
Please post the following logs/Information in your reply
- Kaspersky Log
- A fresh HJT log
- Installed programs list
- How are things running now ?