View Single Post
Old 10-15-2005, 04:04 AM   #16 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,497
OS: N/A


Here's a quickie for you

Have HijackThis fix these entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\SYSTEM32\nkrh.dll (file missing)
O20 - Winlogon Notify: mllmm - mllmm.dll (file missing)
O20 - Winlogon Notify: vtutu - C:\WINDOWS\System32\vtutu.dll (file missing)


Download the file I have attached to this post - delbat.zip

From within it, double-click on delbat.bat
When it finishes running, it would produce a log
Please post that log in your next reply along wit a new HJT log
__________________

Question - what have you done for the community today?
sUBs is offline