|
|
bricat
HijackThis Helper
Reg'd: Wed
Posts: 31986
Loc: belfast
|
Re: Hijack This Log
Fri Dec 23 2005 12:52 AM
|
|
|
|
Quote:
PS - How did you know it was VX2?
after you have looked at thousands of logs you get a sixth sense. but probably the unknown 020 entry
Rerun HJT,and put a checkmark beside these :-
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto O20 - Winlogon Notify: ntfat8 - C:\WINDOWS\SYSTEM32\ntfat8.dll O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\jt8807lue.dll (file missing) O23 - Service: CWShredder Service - Unknown owner - C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\CWShredder.exe (file missing)
now close all windows and browsers and click FIX CHECKED
Then boot up in SAFE MODE
Then navigate to and delete these files\folders in BOLD
C:\WINDOWS\SYSTEM32\ntfat8.dll C:\Program Files\winupdates<----folder
then reboot and post a fresh Hijackthis log.
-------------------- IF I HAVE SAVED YOU MONEY, PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST MALWARE.
When the only tool you own is a hammer, every problem begins to look like a nail.
|
|
|
|