Quote:

---

Killall::

File::
C:\WINDOWS\esbq.exe
C:\WINDOWS\SYSTEM32\muzika.xm
C:\WINDOWS\system32\jodtuutb.dll

Registry::
[-HKEY_LOCAL_MACHINE\~\BrowserHelperObjects\{C1B61448-B276-446F-9008-54DAFD75364F}]
"jodtuutb.dll"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\awvvt]
"awvvt.dll"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\iifghhh]
"iifghhh.dll"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\khfcbcd]
"khfcbcd.dll"=-

---

Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.




Referring to the picture above, drag CFScript.txt into ComboFix.exe.

This will start ComboFix again.(it may ask you to reboot your computer)

When finished, it shall produce a log for you at C:\ComboFix.txt

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

Then:-

Rerun HJT,and put a checkmark beside these :-


O2 - BHO: (no name) - {15E7287C-4AAF-4EE4-82A4-6C94708C48B3} - C:\Program Files\Outlook Express\bidanisu777444.dll
O2 - BHO: 0 - {42143F72-96BF-4403-B3BA-2D2134EB33A0} - C:\Program Files\Windows NT\lavunabi.dll (file missing)
O2 - BHO: (no name) - {B5D95663-2C2F-4A70-A83C-266B035F492F} - C:\Program Files\MSN Gaming Zone\hoketo4444.dll (file missing)
O2 - BHO: (no name) - {C1B61448-B276-446F-9008-54DAFD75364F} - C:\WINDOWS\system32\jodtuutb.dll (file missing)
O2 - BHO: (no name) - {F41154F1-5B52-4FBB-856C-EC3E75047485} - C:\Program Files\MSN Gaming Zone\hoketo83122.dll (file missing)
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O20 - Winlogon Notify: awvvt - C:\WINDOWS\system32\awvvt.dll (file missing)
O20 - Winlogon Notify: iifghhh - iifghhh.dll (file missing)
O20 - Winlogon Notify: khfcbcd - khfcbcd.dll (file missing)

now close all windows and browsers and click FIX CHECKED


Then navigate to and delete these files\folders in BOLD

C:\Program Files\SpySpotter3<-----folder



Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please and
let me know how it is running.

--------------------
MY HELP IS FREE,BUT PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST SPYWARE.

You don't stop laughing when you get old, you get old when you stop laughing!

Post Extras