More Trojans

John2g

This is vundo mljjiff.dll - you won't be able to remove it using HJT. The file is not missing - it is hidden.

Browntoa

thats looking clear, this new hijackthis items are just tidy ups , dead items and stuff that slows boot up

fix these

O2 - BHO: Adobe PDF Reader Link Helper - !!06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\msvcrtd.exe

and fix those items

Browntoa

Good. Now go Start, run, type cmd and press Enter; type or paste into the window:
sc delete msupdate
-press Enter and close the window.
-browse to and delete c:\windows\system32\msvcrtd.exe

to delete go to Start , then My computer , then C: , then Windows , then System32 , then scroll down the page until you see msvcrtd.exe , highlight it and then a red cross should appear in the left hand screen to Delete

Browntoa

run CCleaner and let it delete all it finds

then reboot and do a fresh hijackthis log for me

newnhak

Hi Browntoa

Following your instructions but I cannot delete

msvcrtd.exe

It says it is being used.

K

TonyLisaP

Pull up your task manager (press ctrl-alt-del and select task manager) goto processes and find the msvcrtd.exe process, right click and select end process.

newnhak

I have checked the processes tab twice now but no sign of it.

PROLIANT

Format your Hard disk and start again, it is the quickest method rather than wade through crap to find that you need to do the latter.

newnhak

Thanks for that but I didn't want to reformat. And the pc is a thousand times better after following the excellent instructions on here - I don't think I will format just yet when I have come so far.

K

TonyLisaP

It might be in use as a rundll you need to check your registry
goto start, run and type in regedit and hit okay

In the registry browse to
hotkey_local_machine\software\microsoft\windows\current version\run and look for an entry that contains msvcrtd.exe if you find it delete it.