Options
uninstall isn't working to get rid of search assistant and PSGuard
I have been trying to follow various guides and ideas from other forums but nothing seems to be working. I have tracked the se.dll file and found another "bad" file ANKA.DLL which I am assuming has something to do with search assistant. I have deleted the se.dll autorun message from the registry, and the se.dll file in Windows/Temp. I tried to delete the ANKA.DLL file from Windows/Temp, but a message comes up saying that the file is in use.I was told that I can deletethe bad .dll files from DOS, but I am unsure how, and the other forums were not very helpful.I was also told that I should look for and delete a file called Windows/Won, does anybody know anything about that? I've tried to start the computer di DOS mode by using a startup disk, but I am not sure if I am even doing that correctly.Can somebody please help me?
Here is my current HJT log. It seems to be a lot shorter than most other peoples'. I have been using selective startup, and have turned the startup items off. I dont know if this makes a difference or not. I have also found some sketchy programs in my registry and I am unsure what they are like bxxs5, ClrSchLoader, P2PNetworking, Power Scan, QDAFP, and WhenUSave.
I hope somebody can make sense of the mess Ive written.
Logfile of HijackThis v1.99.1
Scan saved at 6:34:34 PM, on 12/08/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\REGEDIT.EXE
C:\WINDOWS\SYSTEM\MSCONFIG.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/space.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/space.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {7054918A-C324-4E92-A413-F0B090F929F0} - C:\WINDOWS\SYSTEM\ANKA.DLL
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Filter: text/html - {16DF6AF0-DBF8-4AF0-AD4C-D4EECC78C677} - C:\WINDOWS\SYSTEM\ANKA.DLL
O18 - Filter: text/plain - {16DF6AF0-DBF8-4AF0-AD4C-D4EECC78C677} - C:\WINDOWS\SYSTEM\ANKA.DLL
O19 - User stylesheet: (file missing)
O20 - Winlogon Notify: style2 - C:\WINDOWS\Q764740_DISK.DLL (file missing)
Here is my current HJT log. It seems to be a lot shorter than most other peoples'. I have been using selective startup, and have turned the startup items off. I dont know if this makes a difference or not. I have also found some sketchy programs in my registry and I am unsure what they are like bxxs5, ClrSchLoader, P2PNetworking, Power Scan, QDAFP, and WhenUSave.
I hope somebody can make sense of the mess Ive written.
Logfile of HijackThis v1.99.1
Scan saved at 6:34:34 PM, on 12/08/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\REGEDIT.EXE
C:\WINDOWS\SYSTEM\MSCONFIG.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/space.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/space.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {7054918A-C324-4E92-A413-F0B090F929F0} - C:\WINDOWS\SYSTEM\ANKA.DLL
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O18 - Filter: text/html - {16DF6AF0-DBF8-4AF0-AD4C-D4EECC78C677} - C:\WINDOWS\SYSTEM\ANKA.DLL
O18 - Filter: text/plain - {16DF6AF0-DBF8-4AF0-AD4C-D4EECC78C677} - C:\WINDOWS\SYSTEM\ANKA.DLL
O19 - User stylesheet: (file missing)
O20 - Winlogon Notify: style2 - C:\WINDOWS\Q764740_DISK.DLL (file missing)
0