View Single Post
Old 11-21-2004, 03:58 PM   #2 (permalink)
Lorand
VIP Member
 
Lorand's Avatar
 
Join Date: Dec 2003
Location: Bucharest
Age: 41
Posts: 3,042
Default

I'd disable these:

C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\ISTsvc\istsvc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vcfvzyshvjowwmpor.net/s6...eqLeoI3IKUP.jpg
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_...count_id=145499
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_...count_id=145499
O2 - BHO: (no name) - {8207B135-0519-598F-EBF8-E5BB993AF311} - C:\DOCUME~1\James\APPLIC~1\COMPLO~1\iso dent.exe
O2 - BHO: (no name) - {D9C44493-98C7-5DD7-BDC1-FE5D5DEF6BDD} - C:\DOCUME~1\James\APPLIC~1\COMPLO~1\iso dent.exe
O4 - HKLM\..\Run: [RecoverFromReboot] C:\WINDOWS\Temp\RecoverFromReboot.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LogoInterThisDupe] C:\Documents and Settings\All Users\Application Data\Program Wma Logo Inter\stop tons.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKCU\..\Run: [Meta Grey] C:\DOCUME~1\James\APPLIC~1\RULESH~1\BiasDownload.e xe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZZ
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet6_30.dll' missing
Lorand is offline   Reply With Quote