Rerun run scanner but this time select
EXPERT mode
Run a full system scan
Locate the items in the quote box below
Right click them individually and select delete
Accept the warning
Then repeat until they are all gone.
052 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
----------------------------------------------------------------------------------
c:\windows\system32\findic.dll {84c9e310-932c-419d-9043-d84faef76558}
073 %windir%\Tasks
------------------
At1.job : c:\windows\system32\uxjyrll5.exe
At10.job : c:\windows\system32\uxjyrll5.exe
At12.job : c:\windows\system32\uxjyrll5.exe
At14.job : c:\windows\system32\uxjyrll5.exe
At15.job : c:\windows\system32\uxjyrll5.exe
At2.job : c:\windows\system32\uxjyrll5.exe
At3.job : c:\windows\system32\uxjyrll5.exe
At4.job : c:\windows\system32\uxjyrll5.exe
At5.job : c:\windows\system32\uxjyrll5.exe
At6.job : c:\windows\system32\uxjyrll5.exe
At7.job : c:\windows\system32\uxjyrll5.exe
At8.job : c:\windows\system32\uxjyrll5.exe
At9.job : c:\windows\system32\uxjyrll5.exe
105 HKCU\Software\Microsoft\Internet Explorer\MenuExt
-----------------------------------------------------
Sample Toolband Serach : res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
121 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs
--------------------------------------------------------------------------
c:\windows\system32\ddcyvtu.dll
Please
download the
OTMoveIt by OldTimer.
- Save it to your desktop.
- Please double-click OTMoveIt.exe to run it.
- Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\WINDOWS\system32\SI.bin
C:\WINDOWS\system32\dn320d180e.dat
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job
C:\WINDOWS\Tasks\At7.job
C:\WINDOWS\Tasks\At8.job
C:\WINDOWS\Tasks\At9.job
C:\WINDOWS\Tasks\At10.job
C:\WINDOWS\Tasks\At12.job
C:\WINDOWS\Tasks\At14.job
C:\WINDOWS\Tasks\At15.job
c:\windows\system32\uxjyrll5.exe
- Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
- Click the red Moveit! button.
- Copy everything on the Results window to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it on your next reply.
- Close OTMoveIt
[color="#ff0000"]*If a file or folder cannot be moved immediately, you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine, choose
Yes[/color].
[color="green"]**If a reboot was necessary or you needed to Exit before posting the log, you will find a copy of the log at the root of the drive where OTMoveIt is installed, usually at :
C:\_OTMoveIt\MovedFiles\********_******.log(where "********_******" is the "date_time")[/color]
Click
"Exit" to close OTMoveIt.
*
Click here to download
HJTsetup.exe- Save HJTsetup.exe to your desktop.
- Doubleclick on the HJTsetup.exe icon on your desktop.
- By default it will install to C:\Program Files\Hijack This.
- Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
- Put a check by Create a desktop icon then click Next again.
- Continue to follow the rest of the prompts from there.
- At the final dialogue box click Finish and it will launch Hijack This.
- Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
- Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
- Come back here to this thread and Paste the log in your next reply.
- DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
