Webuser Forums: Help

Hello graciewho

Copy and Paste this 'Fix' into either Notepad or Wordpad for future reference

Please download FixWareout from one of these links
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts.
You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.
Once the desktop loads a text file will open (report.txt).
Please post the C:\fixwareout\report.txt ) in your next reply

Please open HijackThis again and choose "Do a system scan only". Please put a check next to each of the following entries (if still present):

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/custo...fo/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sp/*http://uk.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/custo...fo/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [bm] "C:\Program Files\Common Files\SpyGuardPro\bm.exe"
O4 - HKLM\..\Run: [antiviirus] C:\Program Files\antiviirus.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [582dad8d] rundll32.exe "C:\WINDOWS\system32\ifmjykpx.dll",b
O4 - HKLM\..\Run: [BM5b1e9e11] Rundll32.exe "C:\WINDOWS\system32\vcfudgrk.dll",s
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [uqkesbwc] C:\WINDOWS\system32\stkbqvaz.exe
O4 - HKLM\..\Policies\Explorer\Run: [vLJR2RX9GQ] C:\Documents and Settings\All Users\Application Data\dydmxsni\lansngpi.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUxdm080YYGB
O17 - HKLM\System\CCS\Services\Tcpip\..\{197214B1-3925-46E9-B26A-E1142699E957}: NameServer = 85.255.114.8,85.255.112.210
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A4039CB-7B69-4595-8133-B74AD932B6B3}: NameServer = 85.255.114.8,85.255.112.210
O17 - HKLM\System\CCS\Services\Tcpip\..\{22249430-5824-49E5-8610-5E8EA9B486B2}: NameServer = 85.255.114.8,85.255.112.210
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.8 85.255.112.210
O17 - HKLM\System\CS1\Services\Tcpip\..\{197214B1-3925-46E9-B26A-E1142699E957}: NameServer = 85.255.114.8,85.255.112.210
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.8 85.255.112.210
O17 - HKLM\System\CS2\Services\Tcpip\..\{197214B1-3925-46E9-B26A-E1142699E957}: NameServer = 85.255.114.8,85.255.112.210
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.8 85.255.112.210
O20 - AppInit_DLLs:
O21 - SSODL: DriveChk - {dc847624-8291-4476-ad73-4f8a9ab52fc9} - (no file)
O21 - SSODL: dwnrpofk - {352E593D-773A-4D39-AA7B-3BABF1EA8B50} - (no file)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\vjwfgtie.exe (file missing)

Now please close all open windows except HJT and press "Fix checked".

Please reboot your system, rescan with HijackThis and post the new log along with the Fixwareout report.

Thank you.

Post Extras