Ok, I am having trouble with what appears to be a reoccurring trojan on my computer. Ad aware finds and deletes it but it comes back.

I also deleted an old user account and I was wondering if I could delete the old NTUSER.dat files in their document and settings so I don't have to see them. I want the old user's documents and setting folder gone

Attached Files

hijackthis.log (8.3 KB, 1 views)

Yes you can remove all the old users stuff.


Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O2 - BHO: BDEX System - {62EA9201-8CC7-4199-AC30-7744F836322E} - C:\WINDOWS\ttvbontvm.dll
O21 - SSODL: xcvwer - {E1409E54-4D1C-48B7-A269-0D3ADC40C94E} - C:\WINDOWS\xcvwer.dll

Reboot.....
===================================
This will help to identify malware on your system.
Please download Combofix from any of these locations:
Here
or
Here
Save ComboFix to the desktop and please ensure that you disable realtime security/virus programs that monitors your PC while CF is running.
1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Copy and Paste the contents of that log in your next reply with a new hijackthis log. Do not use Code or html unless asked for.
Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.

Ok, Those deleted so just cleaning up after another account and have, UsrClass.dat

Attached Files

hijackthis.log (7.8 KB, 1 views)

errgh, nothing changed in HJT, but another old user still has ntuser.dat that I cannot delete. Can anyone tell me why they are still there?

-edit- Never mind, all better. Thank you very much for the help, I'd donate if I could XD

Just carry on with the Combofix...there may be more cleaning to be done.