Boot into safe mode first. Do EVERYTHING here in safe mode: Get rid of these with Hijackthis:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost; R3 - URLSearchHook: (no name) - {CFFD2A3B-9AF3-E628-A4A0-96CB5EEB58C9} - C:\WINDOWS\System32\isqfxos.dll O2 - BHO: (no name) - {CFFD2A3B-9AF3-E628-A4A0-96CB5EEB58C9} - C:\WINDOWS\System32\isqfxos.dll O4 - HKLM\..\Run: [WINDOWS SYSTEM] beta.exe O4 - HKLM\..\Run: [REGRUN] C:\cool.exe O4 - HKLM\..\Run: [salm] c:\temp\salm.exe O4 - HKLM\..\Run: [Zs3D] C:\WINDOWS\pobjf.exe O4 - HKLM\..\Run: [whudmt] C:\WINDOWS\whudmt.exe O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe O23 - Service: Mouse Hardware Sync (mousehs) - Unknown owner - C:\WINDOWS\System32\mousehs.exe Delete these files: C:\WINDOWS\System32\beta.exe C:\cool.exe C:\DOCUME~1\JIM\MYDOCU~1\SSEMBL~1\chkntfs.exe C:\WINDOWS\System32\??chost.exe C:\temp\salm.exe C:\WINDOWS\pobjf.exe C:\WINDOWS\whudmt.exe C:\WINDOWS\System32\DSentry.exe Go to Add/Remove Programs and uninstall AOL assuming you are no longer an AOL customer (for Internet service). This may not fix everything but it's a start. After you boot back into normal mode, if things aren't working any better, take another report with Hijackthis and post it. Carl -----Original Message----- From: Windows Home/SOHO [mailto:[EMAIL PROTECTED] On Behalf Of Jim Dykes Sent: Tuesday, March 07, 2006 2:59 PM To: [email protected] Subject: Re: Can't Access Microsoft Page One of the malware apps on my laptop is DSO Exploits. It seems that neither Spybot or HijackThis can get rid of it, although SpyBot says it fixed them. I'm thinking, though, that either it didn't of they pop right back up. Anyway, if one runs Spybot again, they're there again. Also, here is a log of HijackThis. I know there must be others in there. I suspect some, but am not sure. http://www.garlic.com/~jimd/hijack-file.txt Maybe you can help point out the bad fellers <smile>. Thanks, Jim -- ---------------------------------------- To unsubscribe, mailto: [EMAIL PROTECTED] Is your picture included in the Official Win-Home List Members Profiles Page? http://www.besteffort.com/winhome/Profiles.html If not, write to: [EMAIL PROTECTED] -- ---------------------------------------- To unsubscribe, mailto: [EMAIL PROTECTED] Is your picture included in the Official Win-Home List Members Profiles Page? http://www.besteffort.com/winhome/Profiles.html If not, write to: [EMAIL PROTECTED]
