View Single Post
  #5 (permalink)  
Old 04-11-2008, 12:24 PM
Sami's Avatar
Sami Sami is offline
Administrator
 
About:
Join Date: Jan 2006
Location: New Jersey
Posts: 804
Sami has a spectacular aura aboutSami has a spectacular aura aboutSami has a spectacular aura about

Default


Please run Hijack this again

and remove following items.

C:\Documents and Settings\All Users\Application Data\incvwbmv\apelibsd.exe
C:\WINDOWS\system32\afmbwjil.exe
O2 - BHO: (no name) - {01A33D85-4706-452A-B71A-99510ADA8C0C} - C:\WINDOWS\system32\mlJAqrQj.dll
O2 - BHO: (no name) - {5DA9D1D7-36B4-4576-A77A-C660352F807A} - (no file)
O2 - BHO: (no name) - {C64C20AE-A8C6-4B8E-B6A0-900E813D0AF2} - C:\WINDOWS\system32\rqRKDwwu.dll
O3 - Toolbar: vnbptxlf - {4126A715-7157-459A-BE7F-D19C9770E169} - C:\WINDOWS\vnbptxlf.dll
O4 - HKLM\..\Run: [9c49d6db] rundll32.exe "C:\WINDOWS\system32\ecbfwkra.dll",b
O4 - HKCU\..\Run: [iiudhslh] C:\WINDOWS\system32\afmbwjil.exe
O4 - HKLM\..\Policies\Explorer\Run: [zQJmn93EYj] C:\Documents and Settings\All Users\Application Data\incvwbmv\apelibsd.exe
O20 - Winlogon Notify: mlJAqrQj - C:\WINDOWS\SYSTEM32\mlJAqrQj.dll


After removing these items, Restart your computer in Safemode and rerun the hijackthis and make sure all the listed items have been removed.

Also in safemode run your antispyware program to make sure there are no more spyware in your system.



Reply With Quote