***
It is nice to see the below as it is often that they are not up to date.
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
~~~~~~~~~~~~
Here are the problem entries:
O2 - BHO: (no name) - {76a9a7ec-1c22-4bb4-8f48-4f48495cc1e1} - C:\WINDOWS\system32\gopikobi.dll (file missing)Unnecessary (deactivated) entry that can be fixed. This is related to the other 2 files listed above.
See ...
http://www.prevx.com/filenames/16749204660543537-X1/GOPIKOBI2EDLL.html O4 - HKLM\..\Run: [CPM0fd7dbe0] Rundll32.exe "c:\windows\system32\kefuguhi.dll",aUnknown application which is related to the file mentioned my last post.
O4 - HKLM\..\Run: [kifelopeya] Rundll32.exe "C:\WINDOWS\system32\kozodobe.dll",sUnknown application which is related to the file mentioned my last post.
O4 - HKUS\S-1-5-19\..\Run: [kifelopeya] Rundll32.exe "C:\WINDOWS\system32\kozodobe.dll",s (User 'SERVICE LOCAL')Unknown application which is related to the file mentioned my last post.
O20 - AppInit_DLLs: c:\windows\system32\kefuguhi.dll,C:\WINDOWS\system32\tojowebo.dllUnknown application which is related to the file mentioned my last post.
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kefuguhi.dll (file missing)Unknown application which is related to the file mentioned my last post.
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kefuguhi.dll (file missing)Unknown application which is related to the file mentioned my last post.
So, yes, the registry entries were not removed causing the small window to open.
To fix these unneeded entries, follow the below steps:
1 - Ensure that all other windows & programs are closed/not running.
2 - Run HJT again.
3 - When the log is presented, click the box to the left of the entries in the above listing.
4 - At the bottom, click the "Fix checked" button.
5 - Wait for it to finish it's work and then restart your computer.
On restart, you should no longer get the small window.
Please let me know the results.
***