Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
Unzip HijackThis into this folder. When you run HijackThis from this folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary.
,,,,,,,,,,,,,,,,,,
The very top of you log is missing the part that tell you OS ,please put in the next log .
,,,,,,,,,,,,,,,,,,,,,,,,,
Do ALT+CTRL+DEL /go to process and right click on these 2 and end process .
C:\Program Files\Windows TaskAd\WinTaskAd.exe
C:\Program Files\Windows TaskAd\WinSched.exe
Then do the following
Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Windows Task Manager] C:\windows\system32\taskmgn.exe
Cant find any info on this ,not sure if it a legit windows update wating to be downloaded or what do you know ,have hijack fix it if you don't have windows updated waiting to be downloaded .
WindowsUpdate82465[1].exe
And this one ,but I would fix them all just to be safe as the good one will download when you go back to that site .
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topconverting.com/activex/loader2.ocx
Now reboot into safe mode and delete the following files and folders if found .
C:\windows\system32\taskmgn.exe,,,,,,,,,delete file
to delete the above files and folder you will need to do the following
go to
Show hidden files & folders
"Fix Checked"...Reboot to SAFE mode to delete files
How to start computer in safe mode
reboot computer and post a new log
