View Single Post
Old 07-02-2004, 07:55 AM   #2 (permalink)
greyknight17
Analyst, Security Team
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,327
OS: Windows 98 & Windows XP Home/Pro

My System

Do an online virus scan at TrendMicro or RAV Antivirus.

End the following processes:

64 MFCD.exe

Check and fix the following:

F0 - syst>m.ini: Shell=
F0 - R__ >ystem.ini: Shel>=
F0 - R__ >ystem.ini: UserInit=
O2 - BHO: (no name) - {6BC9995B-9822-FB13-6822-A01420311515} - C:\PROGRA~1\binlogo\PLUSBAGS.dll
O3 - Toolbar: (no name) - {E73FAF40-8017-2705-E1C3-9B879955F971} - C:\PROGRA~1\binlogo\PLUSBAGS.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [window ping] C:\PROGRA~1\FREEOW~1\64 MFCD.exe
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll

Reboot into Safe Mode (hit F8 key until menu shows up). Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also. Do a search for the following and delete them if they exist:

C:\PROGRA~1\FREEOW~1\ -- delete whole folder
C:\PROGRA~1\binlogo\ -- delete whole folder

Reboot and post a new HJT log file.
greyknight17 is offline   Reply With Quote