Thread: reg cleaner?
View Single Post
Old 02-02-2006, 02:17 PM   #8 (permalink)
Buzz1927
Digaredd
 
Buzz1927's Avatar
 
Join Date: May 2005
Location: Melbourne AU
Posts: 7,613
Default

My mistake, you're running ME, no 023 entries.

Boot into safemode (tap f8 on startup).
Once in safemode:

Run Hijackthis and select "Do a system scan only", place a check by the following entries.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D94AAA2A-C415-42E3-82B6-49FAB4EBFFE9} - (no file)
O2 - BHO: (no name) - {7559B76E-0222-4d77-9499-CCE9EB4EDC2F} - (no file)
O3 - Toolbar: AdwareFilter - {1028F737-81E7-452B-A860-E50CAD90A08C} - C:\PROGRAM FILES\ADWAREFILTERTOOLBAR\ADWAREFILTER.DLL (file missing)
O4 - HKLM\..\Run: [msci] C:\WINDOWS\TEMP\2006227348_mcinfo.exe /insfin
O4 - HKLM\..\Run: [Cleanup] C:\WINDOWS\TEMP\2006227353_mcappins.exe /v=3 /cleanup
O4 - HKCU\..\Run: [SOProc_SoRefRegSoAlertWxLiteNnAj] rundll32 shell32.dll,ShellExec_RunDLL C:\PROGRAM FILES\SOFTWAREONLINE\SOPROC.EXE -pack SoRefRegSoAlertWxLiteNnAj
O4 - HKCU\..\Run: [Registry Cleaner] "C:\PROGRAM FILES\REGISTRY CLEANER TRIAL\REGCLEAN.EXE"


Close all open windows and browsers, and hit "Fix Checked".

Delete these folders.

C:\PROGRAM FILES\REGISTRY CLEANER TRIAL
C:\PROGRAM FILES\GRISOFT

Then reboot and post a new Hijackthis log.
__________________
Son of Glyndwr
Mae hen wlad fy nhadau yn annwyl i mi
Buzz1927 is offline   Reply With Quote