Re: Some Please Help Me. =\ Computer Problem.
Then its not the messenger service. It's some form of malware.
Re: Some Please Help Me. =\ Computer Problem.
That HJT log is a mess, post it in the forum at castlecops, they're the experts at this, http://castlecops.com/forums.html .:)
Re: Some Please Help Me. =\ Computer Problem.
Re: Some Please Help Me. =\ Computer Problem.
What the hell is a WMF image? People need to learn not to click things that say CLICK FOR FREE SOFTWARE AND FUN!
Re: Some Please Help Me. =\ Computer Problem.
Quote:
Originally Posted by Skydragon
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\r?ndll.exe
Hit Ctrl+Alt+Del and end these processes, then delete the files.
Run Hijakthis again, and mark/fix these items:
Quote:
Originally Posted by Skydragon
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Rogers Hi-Speed Internet
R3 - URLSearchHook: (no name) - {D060AAAD-3F4D-31B9-3AC5-66F3BB3336B3} - C:\WINDOWS\system32\wfokgpw.dll
O2 - BHO: (no name) - {D060AAAD-3F4D-31B9-3AC5-66F3BB3336B3} - C:\WINDOWS\system32\wfokgpw.dll
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ssldr - C:\WINDOWS\SYSTEM32\ssldr32.dll
Also, if you don't know what these are, I suggest Googling for info, then deleting them if they're undesirable or if no results are turned up:
Quote:
Originally Posted by Skydragon
O4 - HKLM\..\Run: [BrowserUpdateSched] C:\WINDOWS\system32\nwintsaw.exe DRCA02
O4 - HKCU\..\Run: [Ctrh] "C:\Program Files\cola\sunn.exe" -vt ndrv
O4 - HKCU\..\Run: [Utopia Angel] "C:\Utopia\Angel\Angel.exe"
O4 - Startup: Zeno.lnk = C:\WINDOWS\system32\nwintsaw.exe
Rin Hijackthis again, scan & save the log, then post it here.
Re: Some Please Help Me. =\ Computer Problem.
i had this same problem and after removing it and all does your computer take like forever to open IE or my comp and such things as this because mine does.
Re: Some Please Help Me. =\ Computer Problem.
Quote:
Originally Posted by DarkClown12
i had this same problem and after removing it and all does your computer take like forever to open IE or my comp and such things as this because mine does.
You've probably still got lots of malware issues on there.