Thanks, crunchie.
pg, could I see this please :"Post the report C:\NoLop.log." NoLop appears to have not worked.
Uninstall those pgms as Crunchie suggests, then:
Start hijackthis, select Scan Only, place checkmarks against all the entries listed below that still exist, and then press Fix Checked.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
O2 - BHO: (no name) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Comp about extra bin] C:\Documents and Settings\All Users\Application Data\Roam Program Comp About\Bend exit.exe
O4 - HKLM\..\Run: [bone thunk axis copy] C:\Documents and Settings\All Users\Application Data\pure coal bone thunk\Idol bore.exe
O4 - HKCU\..\Run: [Sect Real] C:\DOCUME~1\PERFEC~1\APPLIC~1\IDLE01~1\Gplantitype.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
Good. Now delete these files:
C:\Windows\system32\blank.htm
C:\Documents and Settings\All Users\Application Data\Roam Program Comp About\Bend exit.exe
C:\Documents and Settings\All Users\Application Data\pure coal bone thunk\Idol bore.exe
C:\DOCUME~1\PERFEC~1\APPLIC~1\IDLE01~1\Gplantitype.exe
- this last is C:\Docs & Settings\Perfect Girl\Application Data\IDLE01~1\Gplantitype.exe
Delete these folders:
C:\DOCUME~1\PERFEC~1\APPLIC~1\IDLE01~1 - I do not know the long form of IDLE01~1
C:\Documents and Settings\All Users\Application Data\Roam Program Comp About
C:\Documents and Settings\All Users\Application Data\pure coal bone thunk
Don't you love the names Lop constructs? "pure coal bone thunk"
I would have thought that NoLop would have removed those, which is why I should like to see the log, please.
Right, post a fresh hijackthis log made after you ran those fixes.
Last edited by gerbil; Dec 2nd, 2008 at 7:15 am.
Deep, deep in the woods, but walking about.