Posts by dlh6213

Thanks for the response! I was really hoping there would be an easy way to do this - preferably with Excel, but I guess not. Thanks for the suggestion; maybe I'll give it a go.

I’m trying to find a way, either with Excel or another program, to find out what combination of numbers will equal a predetermined sum. I’ve tried Excel Help and the internet, and it appears possible, but all the examples are far more complicated than what I’m trying to do and they don’t seem to work for me. Here’s an example of what I’m trying to do:
If I have the following set of numbers:
1.00
1.50
2.00
2.30
2.90
5.30
5.40
6.30
6.90
7.40
7.80
8.30
9.50

I’d like to find out which combinations will total 9.6 and 9.7; the same number can be used multiple time (i.e. 1.00 eight times plus 1.5 = 9.5)

It seems like ?Solver in Excel should work for this, but I can’t get the results I want.

You said you looked through some other posts, did you try this one yet?

http://www.daniweb.com/forums/thread27570.html

If you still have problems, post an HJT log (explained in the post).

Try the suggestions in this post and if you still have problems post an HJT log (explained in the post):

http://www.daniweb.com/forums/thread27570.html

You shouldn't need to format; try the suggestions in this post and if you still have problems post another HJT log:

http://www.daniweb.com/forums/thread27570.html

Vishing is short for 'voice phishing,' learn more about it here:

http://www.internetnews.com/security/article.php/3619086

http://www.dorks.com/html/Nick-Burns-with-Jennifer-Aniston.html

Go to Add/Remove Programs in your Control Panel and remove Viewpoint (or View Point Manager).

Follow the instructions given here:
http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW_RAMM.101

Scan with HijackThis and put a check next to the following entries, if still present:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.k662.com/home.htm
F2 - REG:system.ini: Shell=Explorer.exe ntio.exe
F3 - REG:win.ini: load=E:\WINDOWS\rundl132.exe
O2 - BHO: BHO - {00000015-A527-34E7-25C2-03A4E313B2E9} - c:\Windows\system32\winsrvs_1.dll
O4 - HKLM\..\Run: [ViewMgr] "E:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe"
O4 - HKLM\..\Run: [Msbb.exe] Msbb.exe
O4 - HKLM\..\Run: [Start] Start.exe
O4 - HKLM\..\RunServices: [Msbb.exe] Msbb.exe
O4 - HKCU\..\Run: [Start] Start.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/tech...l/LSSupCtl.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1142199349218
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/tech...l/SymAData.cab
O16 - DPF: {E36C5562-C4E0-4220-BCB2-1C671E3A5916} (Seagate SeaTools English Online) - http://www.seagate.com/support/disc/...npseatools.cab

Note -- there are two 'start.exe' and 'Msbb.exe' entries, make sure you get them both.

Close all open browser windows, and then hit the 'Fix Checked' button.

Go to the following locations and delete the highlighted folder and files:

E:\Program Files\Viewpoint

E:\WINDOWS\rundl132.exe
C:\Windows\system32\winsrvs_1.dll

Do a search for the following and delete any instances found:

Msbb.exe
Start.exe

Did you try this fix yet?

ftp://www.wizardnco.com/pub/Docs/RemoveTVM/

If it doesn't work, start a new thread, describe your problem there, and post a HijackThis log.

Try these solutions:

http://www.symantec.com/security_response/writeup.jsp?docid=2003-081119-5051-99

http://vil.nai.com/vil/stinger

http://www.trendmicro.com/download/tsc.asp

If you still have problems, follow the instructions and recommendations in the links in my signature block below, and then post a HijackThis log.

Please follow the instructions in the links in my signature block below and then post a HijackThis log to finish up.

Thanks DMR :)

Go to Add/Remove Programs in your Control Panel and remove PCODEC, if present

Scan with HJT and have it fix the following entries:

O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\PCODEC\isaddon.dll
O21 - SSODL: bestreak - {874443fe-aa33-4ebf-a6ac-73208787e62d} - C:\WINDOWS\system32\viruxz.dll

Be sure to close ALL browser windows before hitting the 'Fix' button.

Go to the following locations and delete the highlighted file and folder:

C:\WINDOWS\system32\viruxz.dll

C:\Program Files\PCODEC

Empty your Recycle Bin and reboot.

Let us know if you continue to have problems.

Determine which antivirus program you prefer and remove/disable the other so that you only have one running.

Go to Add/Remove Programs in your Control Panel and remove Viewpoint Manager.

Scan with HijackThis and have it fix the following entries:

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1141097734438
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Print Spooler Service (SpoolSvc222) - Unknown owner - C:\WINDOWS\TEMP\mlsdf8h9867239.exe
O23 - Service: Terminal Connections (terms) - Unknown owner - C:\WINDOWS\system32\terminals.exe (file missing)
O23 - Service: Time Service (Time) - Unknown owner - C:\WINDOWS\system32\cjnr4r4rmctkb.exe (file missing)

Close any open browser windows before hitting the 'Fix' button.

…

Go to Add/Remove Programs in your Control Panel and remove Media-Codec, if present.

Scan with HijackThis and have it fix the following entries:

O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\Media-Codec\isaddon.dll
O2 - BHO: C:\WINDOWS\lbbho.dll - {AD893A9B-08BF-4181-B3FF-A03FCE812855} - C:\WINDOWS\lbbho.dll
O3 - Toolbar: Protection Bar - {fe2d25c1-c1db-4b5e-9390-af1cb5302f32} - C:\Program Files\Media-Codec\iesplugin.dll

Be sure all browser windows are closed before hitting the 'Fix' button.

Go to the following locations and delete the indicated file and folder:

C:, Program Files, Media-Codec
C:, WINDOWS, lbbho.dll

Empty your Recycle Bin and reboot.

Do you use the EmpirePoker program?

I suggest you stop using file sharing programs as they are a common means of virus spreading.

Go to Add/Remove Programs in your Control Panel and remove PCODEC, if present.

Scan with HijackThis and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\PCODEC\isaddon.dll (file missing)
O2 - BHO: (no name) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - (no file)
O3 - Toolbar: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - (no file)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by123fd.bay123.hotmail.msn.co...s/MsnPUpld.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/hpf...qdiagh.cab?326

Be sure ALL browser windows are closed before hitting the 'Fix' button.

Go to C:\, Program Files, and delete the PCODEC folder.

Empty your Recycle Bin and reboot.

If you continue to have problems, please post a new log.

Please get the Critical Updates for your system from here:
http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us

Then explain what problems you are having with Firefox and post a new log.

Sorry for the delay in replying to this; if your stepfather is still having this problem, scan with HijackThis and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us6.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us6.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gophersearch.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = www.bellsouth.net
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.xfire.com/xf/index.php
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O13 - Gopher Prefix:
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1155609151342

Be sure ALL browser windows are closed before hitting the 'fix' button.

If he still has problems, please post a new log.

Scan with HJT and have it fix the following entries:

F2 - REG:system.ini: Shell=Explorer.exe asus.exe
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,asus.exe
O4 - HKLM\..\RunServices: [Asus MotherBoard Utility] asus.exe
O4 - HKCU\..\RunServices: [Asus MotherBoard Utility] asus.exe
O23 - Service: dllmgr64 - Unknown owner - C:\WINNT\dllmgr64.exe

Close ALL open browser windows and hit 'Fix Checked.'

Do searchs for asus.exe and dllmgr64.exe and delete any instances found (if any cannot be deleted, try booting into Safe Mode first).

Boot into Safe Mode and do a complete system scan with Ewido, allowing it to fix whatever it finds.

Reboot and empty your Recycle Bin (or run CCleaner if you have it).

If you're still having problems, post the Ewido log and a new HJT log.

Worms:
W32/Tilebot-ET
W32/Tilebot-CP

You may find this link helpful, if not you should post your question in the Hardware forum...
http://h10025.www1.hp.com/ewfrf/wc/genericDocument?cc=us&docname=c00006821&lc=en&jumpid=reg_R1002_USEN

Try it in Safe Mode.

Please follow the recommendations and instructions in my signature block below and then post the HijackThis and Ewido logs here in this thread.

First right-click on your desktop and select New, Folder; give the new folder a name like HJT, and then drag the hijackthis.exe icon that is on your desktop into the new folder.

Scan with HijackThis and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tidbitsmedia.com/members/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
O21 - SSODL: bestreak - {874443fe-aa33-4ebf-a6ac-73208787e62d} - C:\WINDOWS\system32\viruxz.dll (file missing)

Close any open browser windows before hitting the Fix button.

Go to C:\WINDOWS\system32 and delete viruxz.dll if present.

Get and run CCleaner (go to the 'Cleanup' link in my signature block below).

Update AVG and run a full system scan.

Let us know if you still have problems.

We need someplace to start, so please post fresh HijackThis and Ewido logs. Also get Silent Runners (http://www.silentrunners.org/) and post the log from that as well.

Follow the recommendations and instructions in my signature block below and then post the HijackThis and Ewido logs here in this thread.

There is also a program called CCleaner (http://www.filehippo.com/download/fa855939b254b2924ee1d88ccdd5a0ce/download/?nodl=1) that should remove most, if not all, of your temporary files (and other garbage) without the need to search. I'd try it first and see if it gets the Norton stuff, if not follow the instructions here:
http://service1.symantec.com/SUPPORT/nav.nsf/docid/2000041213443506

Please follow the instructions in the following thread thread and then post the Ewido log along with a new HJT log:

http://www.daniweb.com/techtalkforums/thread27570.html

Does anyone have any ideas? If possible could someone please tell me what to look for so I don't always have to come back here asking for help? Thanks.

If you do a search for 'hijackthis tutorial,' you should find instructions for using it. Here are a few:

http://www.castlecops.com/HijackThis.html

This one is from the creator of HJT --
http://www.spywareinfo.com/~merijn/htlogtutorial.html

And this is the one I prefer --
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Follow the instructions in the links below to make sure the infections have been completely removed--

Adware.NewDotNet:
http://www.newdotnet.com/removal.html

Adware.Look2Me:
http://www.daniweb.com/techtalkforums/showthread.php?t=52205&highlight=look2me

SpywareQuake:
Post #2 of this thread -- http://www.daniweb.com/techtalkforums/showthread.php?t=51665&highlight=SpywareQuake

Do a search for SurfSide and delete any instances found

Run CCleaner and then reboot.

Set a new System Restore point.

Here's the Win 9x & Win XP version... (the attachement has better formatting and is easier to read -- you should get it that way if at all possible).

How to Dual-Boot Windows 9X/Me and XP Pro or Home
Updated: 08/20/2004
Introduction
These instructions provide step-by-step directions for installing both Windows 98SE and Windows XP Pro or Home (hereinafter referred to as Win9x & WinXP) on the same hard disk drive so that either operating system can be selected when the computer first boots-up.
While it is possible to install WinXP first then Win9x, it is much more difficult and not recommended or explained here; this describes the installation of Win9x first, then WinXP.
Note: Multiple-boot configurations with Windows 95/Me and Windows NT/2000 can be implemented in a similar fashion.
Overview
Use a Windows 98 startup disk to fdisk and format the hard drive.
Create and format one partition (for Win9x), leaving some unpartitioned space (for WinXP).
Copy Windows 98 files onto the HDD and install Windows 98.
Install software and test system.
Use the WinXP CD to install WinXP (and to create and/or format a new partition in the unpartitioned space).
Install software and test system.
Step-by-Step Instructions
-- Caution --
If using a disk drive that has data on it, it is highly recommended that the data be backed-up before proceeding as everything on the drive will be deleted.
Preparation of …

Several people have mentioned having problems opening the attachments so I am going to post the contents here instead; first up is Win 9x & Win 2000.

How to Dual-Boot Windows 9X/Me and Windows 2000 Pro
Updated: 06/26/2004
Introduction
These instructions provide step-by-step directions for installing both Windows 98SE and Windows 2000 Pro (hereinafter referred to as Win9x & Win2K) on the same hard disk drive so that either operating system can be selected when the computer first boots-up.
While it is possible to install Win2K first then Win9x, it is much more difficult and not recommended or explained here; this describes the installation of Win9x first, then Win2K.
Note: Multi-boot configurations with Windows 95/Me and Windows NT/XP are implemented in a similar fashion.
Overview
Use a Windows 98 startup disk to fdisk and format the hard drive.
Create and format one partition (for Win9x), leaving some unpartitioned space (for Win2K).
Copy Windows 98 files onto the HDD and install Windows 98.
Use the Win2K CD to create and format a new partition in the unpartitioned space.
Install Win2K.
Install software and test system.
Step-by-Step Instructions
-- Caution --
If using a disk drive that has data on it, it is highly recommended that the data be backed-up before proceeding as everything on the drive will be deleted.
Preparation of the hard disk drive (HDD)
• Check the BIOS to make sure …

Was anything done shortly before this problem started such as running a registry cleaner or using a utility like HijackThis?

Your log looks clean to me, are you still having problems? If so, please give the details.

A bit of advice: use Limewire with caution; it's very easy to pick up nasties using it.

I have 30-some computers at home, but I'm not a geek, I'm a guru :)

I didn't get it at all.

i use norton2005 but i not satisfy i want a anti virus that can protect my computer much better. so what is best anti virus?

Check out NOD32, it is consistently one of the top performers
http://www.virusbtn.com/library/files/4pg_reprint.pdf
http://www.eset.com/

You can also review the links in my signature block for more helpful advice.

Post a HijackThis log and we'll see if it shows anything (link to it in my signature block below).

Try a different mouse first to eliminate that as a possibility.

What operating system are you using?

Follow the recommendations and instructions in the links below, and the post a HijackThis log from the infected computer and we'll try to figure out what the problem is.

Hi chansky, welcome to DaniWeb :D

You should have an antivirus program installed, but I don't think you should get Norton; you can download AVG (and others) for free.

To try to get your computer cleaned up yourself, follow the recommendations in the links below. If it still seems to have problems, post a HijackThis log here in this thread and we'll see if it shows anything bad.

how to download the attachment?

Click on the attachment, and then click Open with and select a program, such as Word, to open it with. If it's not working for you for some reason, let me know which one you want, or both, and I'll email it to you.

http://www.consumeraffairs.com/news04/2006/01/symantec_rootkit.html

http://www.theregister.co.uk/2006/01/16/sony_bmg_rootkit_still_widespread/

http://news.zdnet.co.uk/software/applications/0,39020384,39247725,00.htm

Sorry you didn't find what you were looking for, but glad to hear you got it resolved anyway.

Have you tried contacting Toshiba to see if they can help?
http://www.toshibadirect.com/td/b2c/customerservice.to

Hi tmdemby, welcome to DaniWeb :D

You've come to the right place for assistance, but you first need to 'help yourself' by getting the current Windows Updates (not SP2 yet) and doing some basic cleanup. You can get help with this in the links below.

When you finish that, go to post #6 in the HijackThis link and follow the instructions there.

Then post a new HJT log so we can help you clean up any remaining items.

Hi shawn07, welcome to DaniWeb :D

Glad you found that thread and were able to get your system cleaned up yourself!

Don't interpret this as meaning that it is always right to fix (file missing) entries with HijackThis, but in your case, yes, you should have HJT fix them.

Are you still having problems?

Hi little_fish, welcome to DaniWeb :D

You have several things to fix there, but before doing so, you need to put HijackThis into a permanent folder (instructions for doing this can be found in the HijackThis link below).

In the HijackThis link below, follow the instructions in posts #5 & #6.

When you've finished, close any open browser windows, scan with HijackThis, and post a new log along with the Ewido log.

If there is an online game installed on this computer called Lineage, go to Add/Remove Programs (in your Control Panel) and remove it. Also look for, and remove, AlexaToolbar, if present.

Follow the instructions in posts #4, #6, & #8 of the Infection Removal link below.

Scan with HJT and have it fix the following entries:

O4 - HKCU\..\Run: [AlexaToolbar] C:\WINDOWS\alt.exe
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {885BB46A-3F1E-44C3-A01B-A7D9260CC98B} (InstallShield Update Service Setup Player) - http://updates.installshield.com/CAB/dwusplay.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/apop/de...aploader_v5.cab
O20 - Winlogon Notify: browsela - C:\WINDOWS\system32\browsela.dll
O20 - Winlogon Notify: htproc - C:\WINDOWS\SYSTEM32\htproc32.dll
O20 - Winlogon Notify: msupdate - msupdate32.dll (file missing)
O21 - SSODL: BCYMeTX - {07D10610-AD7B-ACBA-28E3-19204D7E85DA} - C:\WINDOWS\system32\kii.dll (file missing)
O21 - SSODL: FecYfC - {38B43067-921E-9ACD-A78A-827E65F01B05} - C:\WINDOWS\system32\kii.dll (file missing)

Close any open windows, other then HijackThis, before hitting Fix checked.

Reboot into Safe Mode.

Go to C:\WINDOWS and delete alt.exe

Do a search for the following files and delete any instances found:

browsela.dll
htproc32.dll
msupdate32.dll
kii.dll

Empty your Recycle Bin.

If you haven't done so already, do a complete system scan with Ewido allowing it to fix whatever it finds. Note: you will be posting the log from …

Hi santacruz05, welcome to DaniWeb :D

You need to first put HijackThis into a permanent folder (instructions for this can be found in the HijackThis link below).

You should also follow the instructions in the Cleanup link.

Next, reboot into Safe Mode and do a complete system scan with Ewido allowing it to fix whatever it finds. Note: you will be posting the log from this scan with your next reply.

Reboot normally, close any open browser windows, scan with HJT, and post a new log along with the Ewido log.