Scan your PC for Errors

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] How do I get rid of these?

[Fixed] Hijackthis! Logs - [Fixed] How do I get rid of these? posted in the Security & Safety forums; Joe please find attached scan reports for Qoologic and RKFiles. Joe when I completed the scans and went to reboot the comp it rebooted in safe mode,I went to the ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #15  
Old 12-19-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Scan Reports

Joe please find attached scan reports for Qoologic and RKFiles.

Joe when I completed the scans and went to reboot the comp it rebooted in safe mode,I went to the configiration and unchecked "start if safe mode"
Upon reboot again it told me that i had changed the configartion,which I had,I then went to the config box and checked start in normal mode,which it did.
Allowing that I changed the config as per previous post.
My question is when i need to start in safe mode in future can i still do it as by tapping the F8 button or will I need to go through that config box to start in safe mode.
log.txt

report.txt

Many thanks to you


  #16  
Old 12-19-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

You where able to get in safemode using f8 before? PB , Dell , HP ect. often use different buttons.


Please download KillBox by Option^Explicit from HERE.

Start Killbox and place a tick next to [x]delete on reboot.
Copy this list into the windows clipboard:


C:\WINDOWS\system32\cpwiuy.dll
C:\WINDOWS\system32\ecesq.dll
C:\WINDOWS\system32\t3odm.dll
C:\WINDOWS\system32\t5rdv.dll
C:\WINDOWS\VBCWCL.DAT


Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the prompt, then click OK.
Exit Killbox and restart your PC.


Copy the contents of Code box below to a notepad file. Save it to Desktop named Fixreg.reg and in the "save as" type box choose "all files".

Code:
REGEDIT4 
 
[-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\fgykytxq]
[-HKEY_CLASSES_ROOT\CLSID\{a90b54f8-4360-4105-a928-78aaddaccc1a}]
[-HKEY_CLASSES_ROOT\CLSID\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}] 
[-HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9E248641-0E24-4DDB-9A1F-705087832AD6}]
Now double click Fixreg.reg and allow it to add/merge with registry when prompted.

And then please post a new Rkfiles and findqoologic log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Last edited by joe5; 12-19-2005 at 10:19 PM.
  #17  
Old 12-20-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Qoologic and Rkfiles

Hi Joe,
hope I got this right .
Joe U asked that I copy a list to windows clipboard,I could not find the windows clipboard so I used wordpad, I hope I have not made things difficult by doing it like that, as I was not sure if u wanted me to specifically use ''windows clipboard".If so my humble apoligies.Oh and the other thing was that I done all that had to be done with the Killbox and registry u wanted me to do,however after all that I rebooted,then done the Qool-Rkfile scan.
Just letting u know in case it makes a difference (or is that overkill:icon_scra )
Please find attached scan results.....Thankyou... Andy
report.txt

hijackthis.log


  #18  
Old 12-20-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by cartandpeg
Hi Joe,
hope I got this right .
Joe U asked that I copy a list to windows clipboard,I could not find the windows clipboard so I used wordpad, I hope I have not made things difficult by doing it like that, as I was not sure if u wanted me to specifically use ''windows clipboard".
That means it hasn't done anything now , "windows clipboard" is the place where things get stored when you rightclick and press "copy".

Originally Posted by cartandpeg
Oh and the other thing was that I done all that had to be done with the Killbox and registry u wanted me to do,however after all that I rebooted,then done the Qool-Rkfile scan.
Just letting u know in case it makes a difference (or is that overkill:icon_scra )
Please find attached scan results.....Thankyou... Andy
Im not sure what you mean but it is importend to follow the instructions in order or they wont work im afraid. And you didn't post the Rkfiles log.

Can you rerun killbox , deleting those files , and then post both a new Rkfiles and qoologic log?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #19  
Old 12-21-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Apoligies

Joe srry about the mess up prior with windows clipboard,I have worked that out now.Joe when i run qoologic and rkfile scans again do I run them in safe mode to do those scans?


  #20  
Old 12-21-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Please run the qoologic and rkfile scans in safemode.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #21  
Old 12-21-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Qoolgic,Rkfile scan reports( I hope)

Joe please find attached the scan reports on qoologic and Rkfiles,if I messed up this time I think i need to to go back and try and see what i am doing wrong srry.........Thankyoulog.txt

report.txt



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 06:07 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top