Member Panel

hey guys, first time here. i guess ill get right to buisness. i want to rid my pc of any anomalies.

Modedit: Welcome to PCHF, please read the hjtrules before posting. You need to attach the log to your post and you need to post in the hjt section not the fixed section. Post moved

O0 wont happen again.

GJ mate. A hjtexpert will analyze your log ASAP

Welcome to PCHF , 011010.


Before fixing things with HijackThis Please Do the Following:


Show hidden files and folders:

For XP:

1. On the Tools menu in Windows Explorer, click Folder Options.
2. Click the View tab.
3. Under Hidden files and folders, click Show hidden files and folders.
4. If you see a warning message, click Yes.
5. Click Apply.
6. Click OK.

Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:

WinXP.

1. Click the Start button.
2. Right-click My Computer, and then click Properties.
3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

Please download CCleaner

Please download Process Explorer by Systernals from HERE.

Also download KillBox by Option^Explicit from HERE.

Then boot up in SAFE MODE and stay in safe mode (hit f8 when booting up), untill the entire fix is done.

Unzip Process Explorer and double click on procexp.exe

In the top section of the Process Exlporer screen double click on winlogon.exe to bring up the winlogon.exe properties screen. Click on the Threads tab at the top.
Once you see this screen click on each instance of browsela.dll once and then click the kill button.
After you have killed all of the browsela.dll's under winlogon click OK.

Next In the top section of the Process Exlporer screen again , double click on explorer.exe and again click once on each instance of browsela.dll then click the kill button.

Once you have done that click OK again.


And then fix these with hjt:


Now delete the files in bold , and run Ccleaner.



Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\system32\browsela.dll

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)


Then post a new hjt log to check please.

hey thanks a lot for the help! it seems to have solved my problems. ill add a log file and if u can look it over to see if i did everything correctly

Looks great to me , and good to hear youre problems are gone.


Only i would advice to go to windows update and get windows fully updated to be better protected for problems like this. Or atleast sp1 , but sp2 is best though.