Problems with redirection on itnernet

beachbhoy

Remove all in MBAM I Assume

GunJack

Absolutely, you may need to re-boot for some of them to be removed, then re-do a HJT log to see how we're getting on...

aliEnRIK

C:\WINDOWS\system32\xel85030.dll (Trojan.Vundo.H)
So it WAS a nasty

Make sure you delete EVERYTHING Beach
Then reboot and do another HIJACK as Gun said.

beachbhoy

ok I have unistalled antispy and deleted all
I will now run HJT and report back

:A

beachbhoy

Wow that was quick

by the way that pccillian thing was atrend product

Here is the results

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:08:13, on 31/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
End of file - 10068 bytes

aliEnRIK

FIX these (again?)
O9 - Extra button: Sky - !!08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.sky.com (file missing)
O9 - Extra button: (no name) - !!6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.ht m (file missing) (HKCU)

Assuming you did delete all those malwarebytes finds, it looks clean to me

So your good to go

(Though id still advise a change of anti virus personally)

beachbhoy

Ok done and rerun HJT

results below
Should I rerun MBAM (full scan or quick scan)

Any recomendations for anti virus

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:51:42, on 31/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
End of file - 9547 bytes

beachbhoy

I am now going to delete the old reports above is that ok?

aliEnRIK

Everything looks fine to me
Download SUPERANTISPYWARE
http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html
UPDATE and scan with that just as a precaution. then id say your good to go

beachbhoy

aliEnRIK wrote: »

Everything looks fine to me
Download SUPERANTISPYWARE
http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html
UPDATE and scan with that just as a precaution. then id say your good to go

:T :A Thank you so much not sure how to repay you, what about a charity donation or something.

Happy new year :beer: