View Single Post

**Buzz1927** · 03-15-2006, 09:47 PM

Run Hijackthis and select "Do a system scan only", place a check by the following entries.

O4 - HKLM\..\Run: [winsupdater] C:\Program Files\winsupdater\winsupdater.exe /auto
O4 - HKLM\..\Run: [] winlog.exe
O4 - HKLM\..\Run: [Microsof Avps32 Control] av32.pif
O4 - HKLM\..\Run: [Microsoft Configu] msconfigu.exe
O4 - HKLM\..\Run: [cc32] C:\WINDOWS\System32\cc32.exe
O4 - HKLM\..\Run: [Anti-Virus Update Scheduler] C:\nefdw.exe
O4 - HKLM\..\Run: [Anti-Virus Update Scheduler V1.39.12R] C:\alc.exe
O4 - HKLM\..\Run: [pcvp] C:\WINDOWS\System32\pcvp.exe
O4 - HKLM\..\Run: [lcps] C:\WINDOWS\System32\lcps.exe
O4 - HKLM\..\Run: [RavTimeXP] C:\WINDOWS\Mstray.exe
O4 - HKLM\..\Run: [HTTP] C:\WINDOWS\System32\HTTP.exe
O4 - HKLM\..\Run: [Microsoft Configuew] msconfiguw.exe
O4 - HKLM\..\Run: [MS22] C:\WINDOWS\System32\MS22.exe
O4 - HKLM\..\Run: [Microsoft Configuewe] msconfiguwe.exe
O4 - HKLM\..\RunServices: [] winlog.exe
O4 - HKLM\..\RunServices: [Microsof Avps32 Control] av32.pif
O4 - HKLM\..\RunServices: [Microsoft Configu] msconfigu.exe
O4 - HKLM\..\RunServices: [Microsoft Configuew] msconfiguw.exe
O4 - HKLM\..\RunServices: [Microsoft Configuewe] msconfiguwe.exe
O4 - HKCU\..\Run: [Microsoft Configu] msconfigu.exe
O4 - HKCU\..\Run: [Microsoft Configuew] msconfiguw.exe
O4 - HKCU\..\Run: [Microsoft Configuewe] msconfiguwe.exe
O4 - HKCU\..\RunServices: [Microsoft Configu] msconfigu.exe
O4 - HKCU\..\RunServices: [Microsoft Configuew] msconfiguw.exe
O4 - HKCU\..\RunServices: [Microsoft Configuewe] msconfiguwe.exe
O20 - Winlogon Notify: ShellCompatibility - C:\WINDOWS\system32\enl6l13s1.dll (file missing)
O20 - Winlogon Notify: Uninstall - C:\WINDOWS\system32\q4rqle951h.dll
O23 - Service: mswmf32 - Unknown owner - C:\WINDOWS\mswmf32.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: nvidGUIv (nvidGUIv2) - Unknown owner - C:\WINDOWS\nvidGUIv.exe
O23 - Service: sdktemp - Unknown owner - C:\WINDOWS\axdcfasb.exe

Close all open windows and browsers, and hit "Fix Checked".

Delete these folders\files.

C:\Program Files\winsupdater
C:\WINDOWS\System32\cc32.exe
C:\nefdw.exe
C:\alc.exe
C:\WINDOWS\System32\pcvp.exe
C:\WINDOWS\System32\lcps.exe
C:\WINDOWS\Mstray.exe
C:\WINDOWS\System32\HTTP.exe
C:\WINDOWS\System32\MS22.exe
C:\WINDOWS\system32\q4rqle951h.dll
C:\WINDOWS\mswmf32.exe
C:\Program Files\Network Monitor
C:\WINDOWS\nvidGUIv.exe
C:\WINDOWS\axdcfasb.exe

Find and delete these files.

winlog.exe
av32.pif
msconfigu.exe
msconfiguw.exe
msconfiguwe.exe

Reboot and post a new Hijackthis log.

03-15-2006, 09:47 PM	#3 (permalink)
Buzz1927 Digaredd Join Date: May 2005 Location: Melbourne AU Posts: 7,613	Run Hijackthis and select "Do a system scan only", place a check by the following entries. O4 - HKLM\..\Run: [winsupdater] C:\Program Files\winsupdater\winsupdater.exe /auto O4 - HKLM\..\Run: [] winlog.exe O4 - HKLM\..\Run: [Microsof Avps32 Control] av32.pif O4 - HKLM\..\Run: [Microsoft Configu] msconfigu.exe O4 - HKLM\..\Run: [cc32] C:\WINDOWS\System32\cc32.exe O4 - HKLM\..\Run: [Anti-Virus Update Scheduler] C:\nefdw.exe O4 - HKLM\..\Run: [Anti-Virus Update Scheduler V1.39.12R] C:\alc.exe O4 - HKLM\..\Run: [pcvp] C:\WINDOWS\System32\pcvp.exe O4 - HKLM\..\Run: [lcps] C:\WINDOWS\System32\lcps.exe O4 - HKLM\..\Run: [RavTimeXP] C:\WINDOWS\Mstray.exe O4 - HKLM\..\Run: [HTTP] C:\WINDOWS\System32\HTTP.exe O4 - HKLM\..\Run: [Microsoft Configuew] msconfiguw.exe O4 - HKLM\..\Run: [MS22] C:\WINDOWS\System32\MS22.exe O4 - HKLM\..\Run: [Microsoft Configuewe] msconfiguwe.exe O4 - HKLM\..\RunServices: [] winlog.exe O4 - HKLM\..\RunServices: [Microsof Avps32 Control] av32.pif O4 - HKLM\..\RunServices: [Microsoft Configu] msconfigu.exe O4 - HKLM\..\RunServices: [Microsoft Configuew] msconfiguw.exe O4 - HKLM\..\RunServices: [Microsoft Configuewe] msconfiguwe.exe O4 - HKCU\..\Run: [Microsoft Configu] msconfigu.exe O4 - HKCU\..\Run: [Microsoft Configuew] msconfiguw.exe O4 - HKCU\..\Run: [Microsoft Configuewe] msconfiguwe.exe O4 - HKCU\..\RunServices: [Microsoft Configu] msconfigu.exe O4 - HKCU\..\RunServices: [Microsoft Configuew] msconfiguw.exe O4 - HKCU\..\RunServices: [Microsoft Configuewe] msconfiguwe.exe O20 - Winlogon Notify: ShellCompatibility - C:\WINDOWS\system32\enl6l13s1.dll (file missing) O20 - Winlogon Notify: Uninstall - C:\WINDOWS\system32\q4rqle951h.dll O23 - Service: mswmf32 - Unknown owner - C:\WINDOWS\mswmf32.exe O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe O23 - Service: nvidGUIv (nvidGUIv2) - Unknown owner - C:\WINDOWS\nvidGUIv.exe O23 - Service: sdktemp - Unknown owner - C:\WINDOWS\axdcfasb.exe Close all open windows and browsers, and hit "Fix Checked". Delete these folders\files. C:\Program Files\winsupdater C:\WINDOWS\System32\cc32.exe C:\nefdw.exe C:\alc.exe C:\WINDOWS\System32\pcvp.exe C:\WINDOWS\System32\lcps.exe C:\WINDOWS\Mstray.exe C:\WINDOWS\System32\HTTP.exe C:\WINDOWS\System32\MS22.exe C:\WINDOWS\system32\q4rqle951h.dll C:\WINDOWS\mswmf32.exe C:\Program Files\Network Monitor C:\WINDOWS\nvidGUIv.exe C:\WINDOWS\axdcfasb.exe Find and delete these files. winlog.exe av32.pif msconfigu.exe msconfiguw.exe msconfiguwe.exe Reboot and post a new Hijackthis log. __________________ Son of Glyndwr Mae hen wlad fy nhadau yn annwyl i mi