1. As long as you have Kazaa and other P2P programs installed, they will continue to create problems. Go to Add/Remove Programs in the Control Panel and remove them. Run Kazaabegone from here to be sure all remnants of kazaa have been removed:
http://www.spychecker.com/program/kazaagone.html
2. Close all windows, scan with the updated HJT, and have it fix this entry:
O4 - HKLM\..\Run: [ynaqqah] C:\WINDOWS\System32\foyyiehl.exe
3. Go to C:\WINDOWS, System32 folder and delete this, if found: foyyiehl.exe
4. Update hijackthis to v1.98.2.
5. Empty the contents of all Temp and Temporary Internet folders for all users.
6. Follow the recommendations in this thread to clean up some of the remaining problems:
http://www.daniweb.com/techtalkforums/thread5690.html (don't leave out SpywareBlaster)
7. Close all windows, scan with the updated HJT, and post a new log.
dlh6213
Posting Maven
3,117 posts since Jul 2004
Reputation Points: 63
Solved Threads: 214
This one should stop the pop-ups;
O2 - BHO: (no name) - {00320615-B6C2-40A6-8F99-F1C52D674FAD} - C:\WINDOWS\localNRD.dll
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
You can put your trust in both dlh6213 and caperjack. They have been helping out with logs for quite a while :).
BTW. Where did the Dockers finish :).
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
btw kazza-lite dont hav n e probs coz i had it 4 ages + ill only listen to the higher mods (mayb) btw2 THXXXXXXXXXXXXXXXXXXXXXXXX
my opinon on this is as long as you watch what you download and have a good antivirus program Kazaa lite is OK .don't use it any more i use this one now ARES P2P ,if you do get it when you install ,watch for the option to uncheck to install NAv Helper and The Search toolbar .
ARES= http://www.aresgalaxy.org/
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
nah i still got it ill giv u the addy it says... http://xadsjt-a.offeroptimizer.com+ the first section xadsjt-a is normally differnent -it is always xa....- but the offer... part is always the same
Run hijack again and post a new log ! :rolleyes:
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
You need to update hijackthis to version 1.98.2. Run hijackthis & go to *Config\Misc Tools\Check for update on-line*. If the site is down, go here. Remove the old version by deleting the file manually. Unzip the new version into the hijackthis folder.
Scan with hijackthis and tick the boxes next to all the following entries, then close all browser and explorer windows, and hit the "Fix checked" button.
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll
O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com/nprotect/nprotect/npx.cab
NProtect Adware
Download, install and keep updated, Spywareblaster from www.javacoolsoftware.com to help keep your system clean.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
