Trojan horse query

debitcardmayhem

Kontiki used to be shipped with bbc iplayer in the years gone by, it is a peer to peer protocol and would share what you downloaded with iplayer to the world using up your upload bandwith. I cannot think of a reason for still using it , but lets first make sure your pc is ok first .
You should be able to remove it from Control Panel/Add or Remove programs and look for Khost/Kservice or Kontiki.

Edited: It is still running in your HJT log
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Kontiki\KService.exe

There are other things too you may not need but leave till later ,
[STRIKE]Rob[/STRIKE]DCM/Debit :cool:

aliEnRIK

TICK and FIX these in hijack -
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.5.0.cab


You also have a service running that id recommend you uninstall/stop -
O23 - Service: ?????? SMART Board (SMART Board Service) - SMART Technologies Inc. - C:\Program Files\SMART Board Software\SMARTBoardService.exe

Inforapennyinforapound

RIK/Rob,

Ta muchly................i am learning so much on this board.Its difficult for an old git like me to get to grips with this so thanks for patience.

So, couple of Q's:

1.How do i fix those items? Do i just go back into Hijack this and the log is saved there somewhere?
2.I assume that there is nothing 'personal' on the log?
3.When/How should i now run/use Malwarebytes and Hijack this in the future now that they are installed?
4.RIK,you use the term 'FIX'.What does FIX mean in this regard? Does it mean these are useless files/programmes or that they are corrupted in some way,oh and Smartboard...dont know what that is.Prob something to do with wife................oh dear so much to do,so little time!!

I really appreciate your help,or anyone else for that matter..i wanna be a geek!!(joke)

macman

When you run Hijack it produces a list, just select (tick) the boxes against the entries that RIK has advised.

aliEnRIK

Inforapennyinforapound wrote: »

1.How do i fix those items? Do i just go back into Hijack this and the log is saved there somewhere?
2.I assume that there is nothing 'personal' on the log?
3.When/How should i now run/use Malwarebytes and Hijack this in the future now that they are installed?
4.RIK,you use the term 'FIX'.What does FIX mean in this regard? Does it mean these are useless files/programmes or that they are corrupted in some way,oh and Smartboard...dont know what that is.Prob something to do with wife................oh dear so much to do,so little time!!

I really appreciate your help,or anyone else for that matter..i wanna be a geek!!(joke)

1 - rerun hijack. TICK and FIX as explained
2 - no
3 - run malwarebytes monthly (UPDATE first). Hijack isnt needed unless you need to post questions on here
4 - FIX is removing the entries from 'running' Someare dead, some are not required.
The smartboard suggests theres some form of 'motherboard monitoring' going on which will slow the computer down (A lot if past experience is anything to go by)