Search Extender, shopping wizard, home search assistant

  1. 05-08-2004  #1
    pencapchew
    pencapchew is offline Newbie

    Search Extender, shopping wizard, home search assistant

    Hey fellas,
    im having problems with three programs that wont go away, Search Extender, Shopping Wizard, and home search assistant. ive tried using adware and andvanced uninstaller pro. I have downloaded Hijack This but Im not really sure what to do with it. I would really appreciate some help here

    Thanks

  3. 05-08-2004  #2
    owen
    owen is offline D-A-L Team Member (UK)
    Hiya,
    The instructions are contained in the Hijack This Log posts at the top of the forum (there is a link to the instructions). There is also a link in my signature which tells you how to post a Hijack This log to the forum. Do not fix anything till advised.
  4. 06-08-2004  #3
    pencapchew
    pencapchew is offline Newbie
    Logfile of HijackThis v1.98.1
    Scan saved at 6:50:12 PM, on 8/5/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\devldr32.exe
    C:\WINDOWS\system32\crct.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\cruy.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\RYAN\Desktop\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://wkeyv.dll/index.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
    R3 - Default URLSearchHook is missing
    F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSInf o\msinfo.exe
    O2 - BHO: (no name) - {90A1CA51-6A23-5DA2-64A6-7E96611FAA5E} - C:\WINDOWS\system32\iepe.dll
    O4 - HKLM\..\Run: [crct.exe] C:\WINDOWS\system32\crct.exe
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
  5. 06-08-2004  #4
    Nirvana
    Nirvana is offline Elite Member
    Download and install AdAware from: http://www.lavasoft.de/res/aaw6.exe and install it. Open AdAware then in the main window, look in the bottom right corner and click on Check for updates now and download the latest reference files. Close AdAware.


    Download About:Buster from http://tools.zerosrealm.com/AboutBuster.zip


    Reboot into safe mode.

    Run AboutBuster.exe, click ok, then start, then
    OK. This will scan your computer for the files responsible for
    hijacking your home and/or search settings/page. Run it twice and copy the results both times.

    Now start AdAware and configure it as follows:

    Click on the gear icon to access the preferences/settings window.

    1. In the General window make sure the following are selected:

    Automatically save log-file
    Automatically quarantine objects prior to removal
    Safe Mode (always request confirmation)

    2. Click on the Scanning button on the left and select:

    Scan Within Archives
    Scan Active Processes
    Scan Registry
    Deep Scan Registry
    Scan my IE favorites for banned URL’s
    Scan my Hosts file

    Under Click here to select drives + folders, choose:
    All of your hard drives

    Click on the Advanced button on the left and select:

    Include additional process information
    Include additional file information
    Include environment information
    Include additional object details

    Click the Tweak button and select:

    Under the Scanning Engine:

    Unload recognized processes during scanning
    Include basic Ad-aware settings in logfile
    Include additional Ad-aware settings in logfile

    Under the Cleaning Engine:

    Let Windows remove files in use at next reboot

    Click on Proceed to save the settings.

    Click Start and on the next screen choose Activate in-depth Scan at the bottom of the page and then choose:

    Use Custom Scanning Options

    Click Next and AdAware will scan your hard drive(s) with the options you have selected.

    Save the log file when it asks and then click Finish

    When finished, mark everything for removal and get rid of it. (Right-click the window and choose Select All from the drop down menu and click Next).

    Reboot your computer.



    Post a new HijackThis log along with the reports from About:Buster.
  6. 06-08-2004  #5
    pencapchew
    pencapchew is offline Newbie
    Logfile of HijackThis v1.98.1
    Scan saved at 10:31:40 PM, on 8/5/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\cruy.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\System32\devldr32.exe
    C:\WINDOWS\system32\crct.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\RYAN\Desktop\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://wkeyv.dll/index.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
    R3 - Default URLSearchHook is missing
    F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSInf o\msinfo.exe
    O2 - BHO: (no name) - {90A1CA51-6A23-5DA2-64A6-7E96611FAA5E} - C:\WINDOWS\system32\iepe.dll
    O4 - HKLM\..\Run: [crct.exe] C:\WINDOWS\system32\crct.exe
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0

    Scan 1 --------
    About:Buster Version 2.0
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!

    -- Scan 2 --------
    About:Buster Version 2.0
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!



    Hope we can fix this thing

    thanks
  7. 06-08-2004  #6
    pencapchew
    pencapchew is offline Newbie
    Lavasoft Ad-aware Personal Build 6.181
    Logfile created on :Thursday, August 05, 2004 10:18:07 PM
    Created with Ad-aware Personal, free for private use.
    Using reference-file :01R335 04.08.2004
    __________________________________________________ ____

    Reffile status:
    =========================
    Reference file loaded:
    Reference Number : 01R335 04.08.2004
    Internal build : 269
    File location : C:\PROGRA~1\Lavasoft\AD-AWA~1\reflist.ref
    Total size : 1322863 Bytes
    Signature data size : 1301756 Bytes
    Reference data size : 21043 Bytes
    Signatures total : 28803
    Target categories : 10
    Target families : 530

    Memory + processor status:
    ==========================
    Number of processors : 1
    Processor architecture : Intel Pentium IV
    Memory available:31 %
    Total physical memory:130352 kb
    Available physical memory:39136 kb
    Total page file size:315060 kb
    Available on page file:249328 kb
    Total virtual memory:2097024 kb
    Available virtual memory:2054852 kb
    OS:

    Ad-aware Settings
    =========================
    Set : Activate in-depth scan (Recommended)
    Set : Safe mode (always request confirmation)
    Set : Scan active processes
    Set : Scan registry
    Set : Deep scan registry
    Set : Scan my IE Favorites for banned URLs
    Set : Scan within archives
    Set : Scan my Hosts file

    Extended Ad-aware Settings
    =========================
    Set : Unload recognized processes during scanning
    Set : Include basic Ad-aware settings in logfile
    Set : Include additional Ad-aware settings in logfile
    Set : Let windows remove files in use at next reboot
    Set : Delete quarantined objects after restoring
    Set : Always back up reference file, before updating
    Set : Play sound if scan produced a result


    8-5-2004 10:18:07 PM - Scan started. (Custom mode)

    Listing running processes
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

    #:1 [smss.exe]
    FilePath : \SystemRoot\System32\
    ThreadCreationTime : 8-6-2004 247 AM
    BasePriority : Normal


    #:2 [winlogon.exe]
    FilePath : \??\C:\WINDOWS\system32\

    ThreadCreationTime : 8-6-2004 250 AM
    BasePriority : High


    #:3 [services.exe]
    FilePath : C:\WINDOWS\system32\
    ThreadCreationTime : 8-6-2004 251 AM
    BasePriority : Normal
    FileSize : 99 KB
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    CompanyName : Microsoft Corporation
    FileDescription : Services and Controller app
    InternalName : services.exe
    OriginalFilename : services.exe
    ProductName : Microsoft
    Created on : 8/18/2001 11:00:00 AM
    Last accessed : 8/6/2004 2:38:31 AM
    Last modified : 8/18/2001 11:00:00 AM

    #:4 [lsass.exe]
    FilePath : C:\WINDOWS\system32\
    ThreadCreationTime : 8-6-2004 251 AM
    BasePriority : Normal
    FileSize : 11 KB
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    CompanyName : Microsoft Corporation
    FileDescription : LSA Shell (Export Version)
    InternalName : lsass.exe
    OriginalFilename : lsass.exe
    ProductName : Microsoft
    Created on : 8/18/2001 11:00:00 AM
    Last accessed : 8/6/2004 2:38:31 AM
    Last modified : 8/18/2001 11:00:00 AM

    #:5 [svchost.exe]
    FilePath : C:\WINDOWS\system32\
    ThreadCreationTime : 8-6-2004 253 AM
    BasePriority : Normal
    FileSize : 12 KB
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    OriginalFilename : svchost.exe
    ProductName : Microsoft
    Created on : 8/18/2001 11:00:00 AM
    Last accessed : 8/6/2004 2:38:31 AM
    Last modified : 8/18/2001 11:00:00 AM

    #:6 [svchost.exe]
    FilePath : C:\WINDOWS\system32\
    ThreadCreationTime : 8-6-2004 253 AM
    BasePriority : Normal
    FileSize : 12 KB
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    OriginalFilename : svchost.exe
    ProductName : Microsoft
    Created on : 8/18/2001 11:00:00 AM
    Last accessed : 8/6/2004 2:38:31 AM
    Last modified : 8/18/2001 11:00:00 AM

    #:7 [devldr32.exe]
    FilePath : C:\WINDOWS\System32\
    ThreadCreationTime : 8-6-2004 2:57:19 AM
    BasePriority : Normal
    FileSize : 25 KB
    FileVersion : 1, 0, 0, 22
    ProductVersion : 1, 0, 0, 22
    Copyright : Copyright
    CompanyName : Creative Technology Ltd.
    FileDescription : DevLdr32
    InternalName : DevLdr
    OriginalFilename : DevLdr32.exe
    ProductName : Creative Ring3 NT Inteface
    Created on : 1/1/1980 5:00:00 AM
    Last accessed : 8/6/2004 2:38:32 AM
    Last modified : 8/31/2001 6:44:30 PM

    #:8 [explorer.exe]
    FilePath : C:\WINDOWS\
    ThreadCreationTime : 8-6-2004 3:16:09 AM
    BasePriority : Normal
    FileSize : 977 KB
    FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion : 6.00.2600.0000
    CompanyName : Microsoft Corporation
    FileDescription : Windows Explorer
    InternalName : explorer
    OriginalFilename : EXPLORER.EXE
    ProductName : Microsoft
    Created on : 8/18/2001 11:00:00 AM
    Last accessed : 8/6/2004 3:16:09 AM
    Last modified : 8/18/2001 11:00:00 AM

    #:9 [ad-aware.exe]
    FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
    ThreadCreationTime : 8-6-2004 3:17:20 AM
    BasePriority : Normal
    FileSize : 668 KB
    FileVersion : 6.0.1.181
    ProductVersion : 6.0.0.0
    Copyright : Copyright
    CompanyName : Lavasoft Sweden
    FileDescription : Ad-aware 6 core application
    InternalName : Ad-aware.exe
    OriginalFilename : Ad-aware.exe
    ProductName : Lavasoft Ad-aware Plus
    Created on : 8/5/2004 5:24:23 AM
    Last accessed : 8/6/2004 2:54:44 AM
    Last modified : 7/13/2003 2:00:20 AM

    Memory scan result :
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
    New objects : 0
    Objects found so far: 0


    Started registry scan
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

    Registry scan result :
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
    New objects : 0
    Objects found so far: 0


    Started deep registry scan
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

    Deep registry scan result :
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
    New objects : 0
    Objects found so far: 0


    Deep scanning and examining files (C
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

    Disk scan result for C:\
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
    New objects : 0
    Objects found so far: 0

    10:25:49 PM Scan complete

    Summary of this scan
    ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
    Total scanning time :00:07:41:859
    Objects scanned :106613
    Objects identified :0
    Objects ignored :0
    New objects :0
  8. 06-08-2004  #7
    owen
    owen is offline D-A-L Team Member (UK)
    About:Buster has had a bit of trouble removing some of the files. Could you boot into Safe Mode and run About:Buster again please. Then post back here with the About:Buster log/s and the Hijack This log. There is no need to post the Ad-aware log.
  9. 06-08-2004  #8
    pencapchew
    pencapchew is offline Newbie
    -- Scan 1 --------
    About:Buster Version 2.0
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Attempted Clean Of Temp folder.
    Removed Uninstall Key (HSA)
    Removed Uninstall Key (SE)
    Removed Uninstall Key (SW)
    Pages Reset... Done!

    -- Scan 2 --------
    About:Buster Version 2.0
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\ctlodjh.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Error Removing! : C:\WINDOWS\System32\rese.dll
    Attempted Clean Of Temp folder.
    Pages Reset... Done!

    Logfile of HijackThis v1.98.1
    Scan saved at 1:04:47 PM, on 8/6/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\cruy.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\System32\devldr32.exe
    C:\WINDOWS\system32\crct.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\RYAN\Desktop\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://wkeyv.dll/index.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\wkeyv.dll/sp.html#12802
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
    R3 - Default URLSearchHook is missing
    F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSInf o\msinfo.exe
    O2 - BHO: (no name) - {90A1CA51-6A23-5DA2-64A6-7E96611FAA5E} - C:\WINDOWS\system32\iepe.dll
    O4 - HKLM\..\Run: [crct.exe] C:\WINDOWS\system32\crct.exe
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
  10. 07-08-2004  #9
    owen
    owen is offline D-A-L Team Member (UK)
    Right, this isn't working, we are going to have to do some manual removal.

    Close all browser windows, restart Hijack This and put a checkmark next to the following entries:

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
    R3 - Default URLSearchHook is missing
    F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSInf o\msinfo.exe
    O2 - BHO: (no name) - {90A1CA51-6A23-5DA2-64A6-7E96611FAA5E} - C:\WINDOWS\system32\iepe.dll
    O4 - HKLM\..\Run: [crct.exe] C:\WINDOWS\system32\crct.exe
    O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe

    Click Fix Checked

    Then boot into Safe Mode and ensure that you are showing Hidden Files and Folders.

    Then go to C:\Windows\System32 and delete the following files:
    ctlodjh.dll
    rese.dll
    crct.exe

    Then run About:Buster again and post the About:Buster log here along with a fresh Hijack This log
  11. 21-08-2004  #10
    pencapchew
    pencapchew is offline Newbie
    Save 20% on AVG Internet Security 2012 Suite!
    Hi, sorry but its been a while i havnt had the internet. I tried to remove thoes files manualy but it wont let me delete them. it tells me that access is denied, have any suggestions?

    Thanks
+ Reply to Thread
Page 1 of 2 1 2 LastLast
« hijacked home page | Home Search Help Requested (Resolved) »