View Single Post
Old 05-07-2006, 06:08 PM   #7 (permalink)
Osiris
Osiris's Avatar
 

Join Date: Jan 2005

Location: Kentucky

Posts: 32,200

Osiris is a jewel in the roughOsiris is a jewel in the roughOsiris is a jewel in the rough

Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris Send a message via Skype™ to Osiris
Default

Remove these entries:

R3 - URLSearchHook: (no name) - _{EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)

O2 - BHO: ATLDistrib Object - {7A1A109F-58B3-414B-9829-5F4D9BE5FEDE} - C:\WINNT\System32\byvvs.dll

O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINNT\System32\navshext1.dll (file missing

O4 - HKLM\..\Run: [xD4u] C:\WINNT\kxkpac.exe

O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe

O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html

O9 - Extra button: ProRat V1.8 - {89999700-cba3-4071-b251-47cb894244cd} - C:\Documents and Settings\TSimmons\Desktop\New Folder (2)\ProRat.exe (file missing)

O9 - Extra 'Tools' menuitem: ProRat V1.8 - {89999700-cba3-4071-b251-47cb894244cd} - C:\Documents and Settings\TSimmons\Desktop\New Folder (2)\ProRat.exe (file missing)


O20 - Winlogon Notify: byvvs - C:\WINNT\System32\byvvs.dll

O21 - SSODL: F0GEDDBA - {7B0D57C5-7EE4-7424-2D38-6D6F08A608E1} - C:\WINNT\System32\Edpein32.dll (file missing)

O21 - SSODL: mtklefap - {0FC75AB8-6E56-43BE-D79A-79B089031258} - C:\WINNT\System32\igwuab32.dll (file missing)

O21 - SSODL: mtklef - {EEDD669F-2417-479B-29B3-EC7FA797FD30} - C:\WINNT\System32\czhd32.dll (file missing)

after you attemp to remove those entries, and they dont remove, try it in safemode.

O20 - Winlogon Notify: byvvs - C:\WINNT\System32\byvvs.dll <-- if that entry comes back you will need to download killbox to remove it, but we will wait and see
__________________
Osiris is online now