Lonny, Thank you for your help. I did what you said. Not all registry keys from your list were actually present. I have all files deleted. My...
Dave, I am done for the day. If you need more info I will look for it tomorrow DK
Module information for 'IEXPLORE.EXE' MODULE BASE SIZE PATH IEXPLORE.EXE 400000 102400 C:\Program Files\Internet...
Module information for 'Explorer.EXE' MODULE BASE SIZE PATH Explorer.EXE 400000 253952 C:\WINNT\Explorer.EXE...
Dave, I could not find Ms4Hd on my other W2K PC so I will kill it on this one. These files were actually present at \system32:...
This is it: Key Name: SOFTWARE\Microsoft\Windows\CurrentVersion\Ms4Hd Class Name: <NO CLASS> Last Write Time: 11/18/2004 -...
It looks like I am clean now. spoolsv.exe is a legit printer spooler. internat.exe is a legit international keyboard switch spoolsrv.exe...
Dave, Ok! First of all thank you, thank you, thank you!!! Two files: msbkup.exe and spoolsrv.exe are not legit. They are not present in...
Dave, HJT can't fix Trusted zone entry. The only way I know so far it to start regedit and manually delete 63.219.181.7. entry in...
I am fighting with this problem too. In safe mode everything is OK Ad-Aware finds no problems and HJT log looks like this Logfile of...
Separate names with a comma.
