Jaswarbrick_2

The 09 is legit (Realplayer). Hijackthis very often has "(no file)" next to 09 and 023 entries but very often they aren't missing.

Ok, You should print out the following instructions, as we will be working in safe mode. Reconfigure Windows XP to show hidden files: Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select "Show hidden files and folders". Uncheck the "Hide protected operating system files (recommended)" option. Uncheck the "Hide file extensions for known file types" option. Click Yes to confirm. Click OK. Download Winsockxpfix but do not run it yet. I suggest you remove NewDotNet unless you deliberately installed it. It is extremely dubious and commercially sponsored: First, please open Add/Remove programs and uninstall New.Net or NewDotNet from there if listed. If it is not listed, follow these instructions: ÃÆââ¬Å¡Ãâ÷ From a computer that has Internet access, click on the following link: ]http://www.new.net/support/uninstall6_76[Caution: ExecutableFile]. ÃÆââ¬Å¡Ãâ÷ Download and save uninstall6_76[Caution: ExecutableFile] to Local Disc C ÃÆââ¬Å¡Ãâ÷ Click on Start. ÃÆââ¬Å¡Ãâ÷ Click on Run. ÃÆââ¬Å¡Ãâ÷ In the Open window type, C:\uninstall6_76[Caution: ExecutableFile]. ÃÆââ¬Å¡Ãâ÷ Click on the OK button. ÃÆââ¬Å¡Ãâ÷ After removal, you may be prompted to reboot. Please reboot if not prompted. In case your internet connection breaks, run the winsock fix. Open Hijackthis, and select "Scan only" and place a checkmark in the following boxes: R3 - Default URLSearchHook is missing F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.e3e (CAUTION - executable file) O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_90.dll O4 - HKLM\..\Run: [wpib] C:\WINDOWS\wpib.e3e (CAUTION - executable file) O4 - HKLM\..\Run: [Warning] cfpsys.e3e (CAUTION - executable file) O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.e3e (CAUTION - executable file) /auto O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/26fee675102 ... xIE601.cab Then close all other windows and select "Fix Checked". Boot into safe mode by restarting your computer and continuously tapping F8 and selecting "Safe Mode". Click "Start > Control panel > add/remove programs and look for the following and remove them (if present): winupdates netster Then browse for the following and delete them: C:\WINDOWS\system32\Userinit[Caution: ExecutableFile] <- File C:\Program Files\NewDotNet <- Folder C:\WINDOWS\wpib[Caution: ExecutableFile] <- File C:\Program Files\winupdates <- Folder Click start > search and search for the following and delete it: cfpsys[Caution: ExecutableFile] <- File Now reboot normally and post a fresh Hijackthis log please. How is your computer running now!

Welcome :) You are running Hijackthis from a temporary directory. Hijackthis creates backups of fixes it makes and if your temporary files are deleted then backups will be lost: Please open My computer then C drive and click File > New > Folder and name it "Hijackthis" or similar. Then download Hijackthis again, and "Save As" into that new folder. Then post a new log please.

Welcome :) Please open my computer and then open the C drive. Click File > New > Folder and name it Hijackthis. Then download ]Hijackthis and save it into the new folder. Run this online virus scan: Activescan Save the logfile from the scan, and post the Activescan log and a fresh Hijackthis log in your next reply please.

I'm not sure about Nivida because i use SP2 firewall. Try finding an "Exceptions" tab or a wizard which will help you to let certain programs work.

Welcome :) Please reinstall Messenger Plus without the sponsor program (if you have it. If you aren't sure, reinstall but without the sponsor program) Go to Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts". (If you have MSN Messenger but don't want Windows Messenger) Download and run CCleaner Then fix these entries -> O4 - HKLM\..\Run: [nwiz] nwiz.e3e (CAUTION - executable file) /install -> O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.e3e (CAUTION - executable file) -> O4 - HKLM\..\Run: [soundMan] SOUNDMAN.e3e (CAUTION - executable file) -> O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.e3e (CAUTION - executable file) SYSTEMBOOTHIDEPLAYER Then post another log please. :)

ooooh, nice guide. When i used to go there i took range and used protect from magic and antifires, but now you cant range them :cry: :roll:

Here is my 1337 sig ploz! i hope i win the comp :shock: no flaming please it's my first ever sig and i put my hard effort into this.