hijack this log

I'm in safe boot mode and I can't execute the program. It says its infected. Is the only resolution available at this point to reformat my computer? Will that even work?
 
When I started my computer, I think it said a worm infected my computer through opening an email. Is it safe to save all my files, pictures, music w/e to a external hard drive or usb.
 
Rerun hijackthis and place a check next to these entries.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Vnirucucaqiqe] rundll32.exe "C:\WINDOWS\egujofuloh.dll",Startup
O4 - HKCU\..\Run: [taskmandb.exe] C:\DOCUME~1\JC\LOCALS~1\Temp\taskmandb.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1
O20 - AppInit_DLLs: app_dll.dll

Then click on fix checked at the bottom.

Then go to these directories and delete these files if they exist. You may have to enable show hidden files and folders for the last one.

C:\WINDOWS\system32\dvmurl.dll
C:\WINDOWS\egujofuloh.dll
C:\DOCUMENTS AND SETTINGS\JC\LOCALSETTINGS\Temp\taskmandb.exe

Download the latest version of combofix to your desktop.

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Reboot your system into safe mode. Log onto your account and run combofix

After running boot back into regular mode and post a fresh hijackthis log after running combofix.
 
You must log in or register to reply here.
Back
Top