need assistence, please help!

Hello everybody,

Could you please take a look at this hijackthis log. I can't get rid of 18plus startpages. I already used spybot and adaware.

thanks in advance..

Comments

  • SpywareShooterSpywareShooter 127.0.0.1
    edited October 2004
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [Classes] C:\WINDOWS\System32\int1.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)


    Fix those entries then find and delete the following files:
    tfswshx.dll
    int1.exe

    Then reboot and post a new log.
  • edited October 2004
    Hello everybody,

    I tried everything to get rid of 18+ startpages and popups. Could somebody please help me thoroughly clean up my computer...

    I attached a log.

    thx in advance,

    Girardo
  • SpywareShooterSpywareShooter 127.0.0.1
    edited October 2004
    O4 - HKLM\..\Run: [Classes] C:\WINDOWS\System32\mstar2.exe

    Fix that entry then find and delete mstar2.exe then reboot and post a new log.
  • edited October 2004
    thank you very much for your help. I attached the new log.
  • edited October 2004
    Thanks mister spywareshooter,

    I posted a new log. It seems to work.

    Girardo
  • LincLinc Owner Detroit Icrontian
    edited October 2004
    I merged your threads since they appear to be for the same problem :hrm:

    Please don't post HJT logs in text files - paste them into your post so it's easier for us to read them :)

    Based on that second log, your system looks clean to me. Are you having any more problems?
  • edited October 2004
    the problems disappeared thanks to your advises. ;D

    Thank you very much!!!!!!!!!

    Girardo
This discussion has been closed.