Hi, I'm new to these forums, but it looks well-designed and friendly, so I decided to join up.

Recently...actually a long time ago, my computer runs slower than what it did when I bought it (2002, eMachine, 256 RAM, 1.5gHz), so I ran a couple dozen adware scanners, disabled all (nonessential) startup processes in msconfig, defraged, etc.

This is my HJT log, which I saved after i followed all of the directions from ladygreenwich, and I deleted a few suspicious looking files myself (they were conspicuously adware). I'd appreciate any help with identifying any possible malware,adware,etc. Thanks in advance!

Greetings bwzhou6543.

You didn't attach the HijackThis log to your post?

Oh wow... can't believe i overlooked that.. must have been tired. Here you go.

Attached Files

hijackthis.log (6.3 KB, 3 views)

Hi bwzhou6543
Not to much to fix...

Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

2 - BHO: (no name) - {5310CA2E-D399-F592-BA54-E60CD0535E31} - C:\WINDOWS\System32\xpjjooff.dll (file missing)
O2 - BHO: (no name) - {B2A73A83-E403-A6B2-9086-7483BF2A3CCD} - C:\WINDOWS\system32\dqbmifef.dll (file missing)
O2 - BHO: (no name) - {D30FDD06-48A4-F149-8258-5E64C5DF49C4} - C:\WINDOWS\system32\hleippeh.dll (file missing)
O2 - BHO: (no name) - {DA06A192-F757-A6CC-B7E2-64B84ADA41D8} - C:\WINDOWS\System32\uceferjh.dll (file missing)

Post a new HJT log when done.

Ok, did as you said, but all did was remove the file name from the entry...check out the HJT log. Do I have to remove those from the registry?

Attached Files

hijackthis.log (8.7 KB, 2 views)

Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O2 - BHO: (no name) - {5310CA2E-D399-F592-BA54-E60CD0535E31} - (no file)
O2 - BHO: (no name) - {B2A73A83-E403-A6B2-9086-7483BF2A3CCD} - (no file)
O2 - BHO: (no name) - {D30FDD06-48A4-F149-8258-5E64C5DF49C4} - (no file)
O2 - BHO: (no name) - {DA06A192-F757-A6CC-B7E2-64B84ADA41D8} - (no file)

Open Windows Explorer and delete the following highlighted file/s

C:\WINDOWS\system32\conime.exe

Reboot and post a new HJT log.

Did what you said, but the BHO's would not go away. Here's the new HJT log.

Attached Files

hijackthis.log (6.3 KB, 1 views)