Webuser Forums: quick check

Rerun HJT,and put a checkmark beside these :-

O2 - BHO: (no name) - Aõ - (no file)
O2 - BHO: (no name) - (@õ - (no file)
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - x%õ - (no file)
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\Program Files\iMesh Applications\iMesh MediaBar\iMeshIEHelper.dll
O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - ¨%õ - (no file)
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing)
O3 - Toolbar: eGames Toolbar - {4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL (file missing)
O4 - HKLM\..\RunOnce: [SpybotDeletingA6759] command /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\Registryrepair.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC2709] cmd /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\Registryrepair.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1613] command /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\wallpapere1.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC255] cmd /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\wallpapere1.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB6989] command /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\Registryrepair.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2778] cmd /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\Registryrepair.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1820] command /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\wallpapere1.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD363] cmd /c del "C:\Documents and Settings\connor\Application Data\HbTools_Icons\wallpapere1.ico"
O4 - S-1-5-21-2320958936-1906211764-3376078148-1007 Startup: Screen Saver Control.lnk = C:\WINDOWS\FSScrCtl.exe (User '?')
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
O23 - Service: FreezeScreenSaver - Unknown owner - C:\WINDOWS\system32\FreezeScreenSaver.exe (file missing)
O24 - Desktop Component 0: (no name) - http://shop.orangecountychoppers.com/images/wallpaper/mikey_1024.jpg

now close all windows and browsers and click FIX CHECKED

Then :-

Download and install SUPERAntiSpyware Home Edition (free)
Once installed, update the program definitions when prompted.
Click the "Preferences" button and then the "Scanning Control" tab.
Under "Scanner Options" make sure the following are checked/selected:
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.
Ignore System Restore/Volume Information on ME and XP.
Deselect all other scanning options.
Close SUPERAntiSpyware for use later.

Please reboot your computer and enter Safe Mode (tap the F8 key just before Windows starts to load, then select Safe Mode).

Open SUPERAntiSpyware and click the "Scan your computer" button.
On the left, select "C:\Fixed Drive".
On the right, under "Complete Scan", choose "Perform Complete Scan".
Click "Next" to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click "OK".
Make sure everything in the white box has a check next to it, then click "Next".
After quarantining anything found, you may be prompted to reboot, click "Yes".

Reboot back into Normal Mode...

Now Re-scan with HijackThis and post the new log and the SUPERAntiSpyware Log.

--------------------
MY HELP IS FREE,BUT PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST SPYWARE.

You don't stop laughing when you get old, you get old when you stop laughing!

Post Extras