Recommended Driver Scanner

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] How do I get rid of these?

[Fixed] Hijackthis! Logs - [Fixed] How do I get rid of these? posted in the Security & Safety forums; Please boot in safemode again. Start Killbox and place a tick next to [x]delete on reboot. Copy this list into the windows clipboard: C:\WINDOWS\VBCWCL.DAT C:\WINDOWS\system32\ecesq.dll C:\WINDOWS\system32\t3odm.dll C:\WINDOWS\system32\t5rdv.dll Back in Killbox ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #22  
Old 12-21-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Please boot in safemode again.

Start Killbox and place a tick next to [x]delete on reboot.
Copy this list into the windows clipboard:



C:\WINDOWS\VBCWCL.DAT
C:\WINDOWS\system32\ecesq.dll
C:\WINDOWS\system32\t3odm.dll
C:\WINDOWS\system32\t5rdv.dll




Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the prompt, then click OK.
Exit Killbox and restart your PC.


Copy the contents of Code box below to a notepad file. Save it to Desktop named Fixreg.reg and in the "save as" type box choose "all files".

Code:
REGEDIT4 
 
[-HKEY_CLASSES_ROOT\CLSID\{incert csdl here}]
[-HKEY_CLASSES_ROOT\CLSID\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}] 
[-HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9E248641-0E24-4DDB-9A1F-705087832AD6}]
Now double click Fixreg.reg and allow it to add/merge with registry when prompted.

And then please post a new Rkfiles and findqoologic log.
If possible , Please Do Not reboot youre pc until I reply back.


And do you have any "WebNexus" software installed?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #23  
Old 12-22-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default quick question

Hi Joe as before when i do the qoologic and Rkfile scans u asked me to do them in safe mode which i assume i would do again,in your prev post u asked me to do the scans,post them and not turn my comp off untill u get back to me,the thing is how do i post etc in safe mode as i have no internet access?
In relpy to if I have webnexus installed,yes, it was but i done a clean up last nite using Microsoft antispyware and it highlighted it so I deleted it?


  #24  
Old 12-22-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default

Joe if its ok with u I may have to do what u ask in my morning as with our time difference i would have to leave my comp running all night and I dont in case of fire risks.So i will make a point of getting up much earlier, thus enabling me more time.Joe thank u for your patience,i ask questions only because i dont want to mess this up( though i seem to be doing that lol)
If by chance i am still on early A.M my time and u r on I will try and do it then.....Thanks and srry..........Andy


  #25  
Old 12-22-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by cartandpeg
Hi Joe as before when i do the qoologic and Rkfile scans u asked me to do them in safe mode which i assume i would do again,in your prev post u asked me to do the scans,post them and not turn my comp off untill u get back to me,the thing is how do i post etc in safe mode as i have no internet access?

This time delete the items with killbox , and after it has rebooted run the fixreg and the 2 scans in normal mode please.

And no prob to do it tommorow. But i will be online for a couple more hours now.


Originally Posted by cartandpeg
In relpy to if I have webnexus installed,yes, it was but i done a clean up last nite using Microsoft antispyware and it highlighted it so I deleted it?
If it is already gone then nevermind


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #26  
Old 12-22-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Thumbs up Thankyou

Joe i could not find webnexus in add/remove,when it was there i could not remove it as per add/remove,but it did remove when I done the microsoft scan,i will do another later just to check again and i will do what u require tomorrow,i better get into this festive cheer mode and get to these BBqs that r going on here.....Thankyou


  #27  
Old 12-22-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by cartandpeg
Joe i could not find webnexus in add/remove,when it was there i could not remove it as per add/remove,but it did remove when I done the microsoft scan
Yeah , i already edited my post , i miss red what you wrote at first.


Originally Posted by cartandpeg
i better get into this festive cheer mode and get to these BBqs that r going on here
LOL , its almost freezing over here. But have fun.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #28  
Old 12-23-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Qoologic and Rkfile scans

Hi Joe here r the scans I will be about and I will keep checking for reply and comp has not been rebooted.......thanks Andy

log.txt

report.txt



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 05:46 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top