We help IT Professionals succeed at work.

Please review HIJACKTHIS file

tonyadam
tonyadam asked
on
My apologies.....the file was not attached in the first request.  

This is Dell E521 with XP Media Center installed as the OS.  It was very badly infected with viruses and malware.  I think I have most of it cleaned out.  However, there are still a couple of issues associated with missing files on startup.  Could someone please look at the HIJACKTHIS file attached to see if there is anything additional that should be removed?  Thanks.  hijackthis.log
Comment
Watch Question

Commented:
I would scan the computer with Malware Bytes http://www.malwarebytes.org/
and/or Spybot S&D http://www.safer-networking.org/en/download/
 
Top Expert 2009

Commented:
Fix these>

O4 - HKLM\..\Run: [orputiei] c:\documents and settings\bud woodard\local settings\application data\hwwotd\nlyydyl.exe

O4 - HKLM\..\Run: [wknrlkpswoe] c:\documents and settings\bud woodard\local settings\application data\jvwxhmsr\eeqnsly.exe

O4 - HKCU\..\Run: [orputiei] c:\documents and settings\bud woodard\local settings\application data\hwwotd\nlyydyl.exe

O4 - HKCU\..\Run: [wknrlkpswoe] c:\documents and settings\bud woodard\local settings\application data\jvwxhmsr\eeqnsly.exe

O4 - HKUS\S-1-5-19\..\Run: [fajasudiwi] Rundll32.exe "C:\WINDOWS\system32\bogopani.dll",s (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [fajasudiwi] Rundll32.exe "C:\WINDOWS\system32\bogopani.dll",s (User 'NETWORK SERVICE')

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:1038


Then scan with Tdsskiller + Hitmanpro
http://support.kaspersky.com/viruses/solutions?qid=208280684
http://www.surfright.nl/en/hitmanpro
tonyadamRetired

Author

Commented:
OK...will fix these.  In addition, there were two issues on startup.  1. "C:\windows\cdltex.dll"  missing etc.  I was able to locate this in the HIJACKTHIS list and deleted its entry.  LIkewise, another error was realted the "....adobe\update\flacor.dat".  I found that one and deleted it also.  This fixed the startup issues.  I hope that this is OK. If not, let me know.
Top Expert 2009
Commented:
Missed those. Its ok.
tonyadamRetired

Author

Commented:
Thank you.   Looks to be very clean now.
Top Expert 2009

Commented:
Still scan with the others!!