Those are updates to the OS I believe. If you get everything cleared up without reformatting you may wanna go back and reupdate windows.
Printable View
Those are updates to the OS I believe. If you get everything cleared up without reformatting you may wanna go back and reupdate windows.
Please boot into safe mode and select the following with HijackThis. With all windows (including this one!) closed, please select "fix.”
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - C:\Program Files\TV Media\TvmBho.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-C0FB-EF60B19DB42E} - C:\PROGRA~1\Srng\SNHelper.dll (file missing)
O4 - HKLM\..\Run: [UBMWERJTB] C:\WINNT\UBMWERJTB.exe
O4 - HKLM\..\Run: [BMZHRJX] C:\WINNT\BMZHRJX.exe
O4 - HKLM\..\Run: [BHOUY] C:\WINNT\BHOUY.exe
O4 - HKLM\..\Run: [HSD] C:\WINNT\HSD.exe
O4 - HKLM\..\Run: [XFPZ] C:\WINNT\XFPZ.exe
O4 - HKLM\..\Run: [CIPWG] C:\WINNT\CIPWG.exe
O4 - HKLM\..\Run: [fash] C:\WINNT\fash.exe
O4 - HKLM\..\Run: [wdskctl] C:\WINNT\wdskctl.exe
O4 - HKLM\..\Run: [stcloader] C:\WINNT\System32\stcloader.exe
O4 - HKLM\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKLM\..\RunOnce: [Q828026] "C:\WINNT\INF\unregmp2.exe" /Update << see http://www.pestpatrol.com/PestInfo/u/unregmp2_exe.asp
O4 HKCU\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe
O16 - DPF: {13197ACE-6851-45C3-A7FF-C281324D5489} - http://www.2nd-thought.com/files/install026.exe
Then find and delete the following files/folders in bold:
C:\WINNT\UBMWERJTB.exe
C:\WINNT\BMZHRJX.exe
C:\WINNT\BHOUY.exe
C:\WINNT\HSD.exe
C:\WINNT\XFPZ.exe
C:\WINNT\CIPWG.exe
C:\WINNT\fash.exe
C:\WINNT\wdskctl.exe
C:\WINNT\System32\stcloader.exe
C:\Program Files\TV Media << folder and everything in it
"C:\WINNT\INF\unregmp2.exe
Next, reboot and let's see a fresh HijackThis log.
:)
I went in safemode and ran hijack and deleted everything that looked bad, the i ran adaware in safe mode and then finally went into my registry and deleted everything that looked bad.. its been about 15 hours now and i havent had any problems... thanks for your help everyone! Hijackthis is the best thing since sliced bread