Hi,
Can anyone help me. My Windows XP system restore fails to work anymore and Windows XP updates don't install. I've tracked the problem down to the time I ran a "hijack this" scan of my PC and followed the instructions given to me in the thread in the Hijackthis forum. I'm worried I deleted the wrong thing by mistake or that the instructions I recieved casued the problems
Below are the instructions I recieved in in the Hijackthis forum. I have the hijackthis logs before and after I followed the instructions below if this help
Please can anyone help!
Worried of Chester!
Instructions given as follows by the Hijack this forum:
Greetings and welcome to TomCoyote.org!
CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!
Run Hijack This!
Click "Scan", then "check" the box to the left of these item(s):
O2 - BHO: MyQuickSearch Search Assistant BHO - {04011C11-2F3B-44ed-977C-270CA669C6B2} - C:\Program Files\MyQuickSearch\SrchAstt\1.bin\MQSSRCAS.DLL
O2 - BHO: (no name) - {0B519E07-7824-4adc-8890-93D5EABBF285} - (no file)
O2 - BHO: mqsBar BHO - {0E677221-E309-4341-81BD-3CC3018BF5B3} - C:\Program Files\MyQuickSearch\bar\1.bin\MQSBAR.DLL
O2 - BHO: (no name) - {17A5455C-E917-7796-8250-64550DA82D40} - C:\WINDOWS\System32\gzhrou.dll
O2 - BHO: {416E989F-6D8C-40DE-9413-3DA20C1FE5BA} - {416E989F-6D8C-40DE-9413-3DA20C1FE5BA} - C:\WINDOWS\1089583434.dll
O2 - BHO: CSObj Class - {CD209A08-98B5-4669-AF9F-447AC5253356} - C:\WINDOWS\System32\CSapp.dll
O3 - Toolbar: My &Quick Search - {0E677229-E309-4341-81BD-3CC3018BF5B3} - C:\Program Files\MyQuickSearch\bar\1.bin\MQSBAR.DLL
O4 - HKLM\..\Run: [WebSavingsFromEbates0] "C:\Program Files\WebSavings_from_Ebates\WebSavingsFromEbates0 .exe"
O4 - HKCU\..\Run: [Aida] C:\Documents and Settings\Richard\Application Data\ttuh.exe
O4 - HKCU\..\Run: [Yuq] C:\WINDOWS\System32\hrfgrhbg.exe
O8 - Extra context menu item: Web Savings - file://C:\Program Files\WebSavings_from_Ebates\Sy400\Tp400\scri400a. htm
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.xxxtoolbar.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://software-dl.real.com/118d7242...p/RdxIE601.cab
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) -
http://www.mt-download.com/MediaTicketsInstaller.cab
O21 - SSODL: System - {E4E64D78-FD1E-4587-8C19-00F694386840} - C:\WINDOWS\system32\system32.dll (file missing)
Then click "Fix checked".
Reboot in "safe" mode.
Find and delete:
c:\documents and settings\richard\application data\ttuh.exe <--- file
c:\program files\myquicksearch <--- FOLDER
c:\program files\websavings_from_ebates <--- FOLDER
c:\windows\1089583434.dll <--- file
c:\windows\system32\csapp.dll <--- file
c:\windows\system32\gzhrou.dll <--- file
c:\windows\system32\hrfgrhbg.exe <--- file
Some malware files may be "hidden". Be sure to show hidden files when looking for these file(s).
Reboot in normal mode and "copy/paste" a new log file into this thread.
Linear Mode
