Free PC Performance Scan

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] How do I get rid of these?

[Fixed] Hijackthis! Logs - [Fixed] How do I get rid of these? posted in the Security & Safety forums; Ok Joe registry file is done and report attached... report.txt...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #36  
Old 12-23-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default qool scan

Ok Joe registry file is done and report attached...

report.txt


  #37  
Old 12-23-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

This is not going aswell as usuall..


Looks like they have to be manually removed. Go to start/run/regedit


First make a backup:

Click on the FILE menu and select export
Save the file as backup. Save the file somewhere you will remember and not delete.
IMPORTANT: make sure to set the export range to ALL




Then navigate to:

HKEY_CLASSES_ROOT\CLSID\

{6EC11407-5B2E-4E25-8BDF-77445B52AB37}



HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\

{6EC11407-5B2E-4E25-8BDF-77445B52AB37}



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\

WebNexus



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\

{9E248641-0E24-4DDB-9A1F-705087832AD6}



And right click on the items in bold and select remove.


Then post a new Qoologic log.

PS, it could be tommorow before i repley back. :sleepy1:


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #38  
Old 12-23-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default No worries

Ok Joe ty I will do all that a bit later on will take me awhile to navigate all that,thankyou Joe for your time and patience,sleep well my friend...Andy


  #39  
Old 12-23-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Red face Unsure

Joe i am having a problem with your last post in respect to regedit.
When i go to the Export Registry Editor i know I where I can save it to etc,but,what file do I save?

Also what u asked me to look for in Registry Editor, I can not find any of them
Where this one is
HKEY_CLASSES_ROOT\Folder\shellex\ColumnHandlers\
I found the shellex folder but it was under SHCmd and it contained Drop handler and Icon handler,no ColumnHandlers?
I can find the places u ask but none of the Bold text u gave me.I am pretty sure I am in the right place( but there again who knows with me:computer_ )
I will go through and have another look as the night goes on.
Sorry Joe if I am not able to grasp the concept of some of this I feel a goose at times asking so much ......Thanks Again Andy


  #40  
Old 12-23-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Sounds like you understand everything just fine. Quite saying youre sorry. (j/k)

But if they are not there , then that would explain why we couldn't remove them... But why is Findqoologic finding them then...:computer_



Can you run a new Ewido scan and post the log to see if that still finds anything? And does youre pc still have any problems?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #41  
Old 12-24-2005
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 841
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default ewido Scan results

Hi Joe,
please find attached the ewido scan,it showed all clear.
The comp is running fine,other than a few small probs which i will post at a later date,there is no indication of what problem i had prior.
I am starting to understand some of this we r doing now,i ran the qoologic scan a few times last night and the same thing kept coming up( which is what we have been chasing)how ever I would not atempt to clear anything if anything showed up.Ok Joe here is the scan result.......Thankyou AndyScan report_20051224.txt.txt


  #42  
Old 12-24-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

The Ewido log is indeed completly clean , Its strange but if the .reg files cant remove those entry's , and if manuall searching say they arent there then im pretty sure it is a false reading somehow.


What are the other problems you have?


Comments on this post
cartandpeg comments: The time and patience Joe showed was above and beyond the call of duty. thankyou
__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 06:05 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top