Member Panel

jennifer rees

can some one help me either tell me what this virus is or help me delete it. Its called behaveslike:trojan.firewallbypass thank you

joe5

Hi there Jennifer , welcome to PCHF.

If you follow the instructions in the "Prework" link below and attach the 2 resulting log files to a post here then we'll see if we can clean that up for you.

jennifer rees

thanks joe for your help ive run all scans and hey seem to do the trick thanks again jenny. i have attached my hi jack this file

joe5

Ewido removed the prob it seems , but these can be fixed with hjt:

O4 - Startup: PowerReg Scheduler V3.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZCxdm579YYGB

And do you use and know these three?

C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe

C:\Program Files\FriendFinder Messenger\FriendFinder Messenger\FFIMC.exe
O4 - Startup: FriendFinder Messenger.lnk = C:\Program Files\FriendFinder Messenger\FriendFinder Messenger\FFIMC.exe

C:\Program Files\camtool\VideoMonitor\CamTool.exe
O4 - Global Startup: camtool.lnk = C:\Program Files\camtool\VideoMonitor\CamTool.exe

And did you set this as startpage youre self?

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\uk.htm
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm

Also can you post the Ewido log?