View Single Post
Apr 26th, 2004
0

Re: BlazeFind.Bridge

Yes, delete the files. The info you gave is sufficient thanx. I wasn't sure what that Barad013 was.

Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. (Not a temporary folder & not on the desktop). Close all (browser) windows & have HJT fix these entries by placing a check in the appropriate box=

R3 - Default URLSearchHook is missing
F0 - system.ini: Shell=
F2 - REG:system.ini: Shell=

O4 - HKLM\..\Run: [Distributed Transaction Coordinator System] svchoct.exe
O4 - HKLM\..\Run: [Microsoft MSN Service] msmsn.exe
O4 - HKLM\..\Run: [boy] c:\winnt\fonts\fonts\Windows.exe
O4 - HKLM\..\Run: [w0ndz] C:\WINNT\system32\f4k3\kolder.exe C:\WINNT\system32\f4k3\dirote.exe
O4 - HKLM\..\RunServices: [Microsoft MSN Service] msmsn.exe

Reboot into safe mode following the instructions here & navigate to & delete

c:\winnt\fonts\fonts\Windows.exe< this one
C:\WINNT\system32\f4k3< this folder

Reboot normally after doing the above then post a fresh log plz.
Moderator
Featured Poster
Reputation Points: 1142
Solved Threads: 982
Most Valuable Poster
crunchie is offline Offline
12,165 posts
since Feb 2004