PDA

View Full Version : Loads of spyware - spybot errors


pandaking
28 Sep 2004, 5:56pm
...

SpywareShooter
28 Sep 2004, 7:56pm
Welcome to Short Media forums.

Before doing the following, please Set your computer to show hidden files and folders (http://www.short-media.com/forum/showpost.php?p=172588&postcount=3), Disable System Restore (http://www.short-media.com/forum/showpost.php?p=172591&postcount=4), and Reboot in Safe Mode (http://www.short-media.com/forum/showpost.php?p=175908&postcount=6).

Once you have done that, Run HijackThis and have it fix the following:


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.alicesgarden.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.meshcomputers.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.alicesgarden.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://rvorlikodtyzcjkcknpxlwdr.com...pgt59wHmqK.html
O2 - BHO: (no name) - {921C1B7E-FCDB-4474-638F-C1BECDBBB555} - C:\PROGRA~1\INTERN~2\FreeEnc.exe
O2 - BHO: (no name) - {C9DFEED8-6105-402C-35B6-DA58096E2D99} - C:\PROGRA~1\INTERN~2\FreeEnc.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [proxy dumb ace part] C:\Documents and Settings\All Users\Application Data\browse flag proxy dumb\Exiteggs.exe
O4 - HKLM\..\Run: [second mail support build] C:\Documents and Settings\All Users\Application Data\logobrowsesecondmail\FragLogo.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart


Then find and locate the files listed above and Quarentine Them (http://www.short-media.com/forum/showpost.php?p=173532&postcount=5).

Once you have done that, reboot, scan with HiijackThis again, and post a new log.

pandaking
5 Oct 2004, 4:25pm
...