Tech Support Forum - View Single Post - Help

Ried · 12-05-2005, 09:56 AM

That's good that they were not there. I wanted to be certain they were gone since you have not been able to find the files yet they were still apparent in the HijackThis log.

From Normal Mode:

Open HijackThis>Config>Misc Tools>Delete a File on Reboot. copy/paste elcad.dll into the box. Do not allow the reboot yet.

Run the scan with HijackThis and fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\elcad.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\elcad.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\elcad.dll/sp.html#28129
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R3 - Default URLSearchHook is missing

Reboot and run another scan with HijackThis and post it here.

12-05-2005, 09:56 AM	#24 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,035 OS: WinXP and Vista	That's good that they were not there. I wanted to be certain they were gone since you have not been able to find the files yet they were still apparent in the HijackThis log. From Normal Mode: Open HijackThis>Config>Misc Tools>Delete a File on Reboot. copy/paste elcad.dll into the box. Do not allow the reboot yet. Run the scan with HijackThis and fix the following entries: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\elcad.dll/sp.html#28129 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\elcad.dll/sp.html#28129 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\elcad.dll/sp.html#28129 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank R3 - Default URLSearchHook is missing Reboot and run another scan with HijackThis and post it here. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."