Hi folks!

[Bunty]

Hi folks :-)

 

Have just done a scan and would be very grateful if someone would check it for me please! :grin: Will post it on the bottom of my message.

 

Second time that I have posted a scan on a forum so very green Look forward to learning lots over the months - hopefully :roll:

 

Live a long way from an exchange with loads of countryside in between and old copper wire cables :roll: Never know if it's the wind and rain the cables or the puter when things go wrong! Know it's never anything to do with B.T. cos they told me so. Why don't I believe them:?: Cos they come and ask to get into my meadow, need the key to the gate ;-)

 

Logfile of IObit HijackScan v1.0.2.0

Scan saved at 20:1:57, on 2011-2-26

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ONSPEED\onspeedcore.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\IObit\IObit Security 360\IS360tray.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe

C:\Program Files\ONSPEED\onspeedgui.exe

C:\Program Files\IObit\IObit Security 360\IS360srv.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\tcpsvcs.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\fxssvc.exe

C:\Program Files\IObit\IObit Security 360\is360.exe

C:\Program Files\IObit\IObit Security 360\a_hijackscan.exe

 

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: NOW!Imaging - {9AA2F14F-E956-44B8-8694-A5B615CDF341} - C:\Program Files\ONSPEED\components\NOWImaging.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Toolbar BHO - {EFA17361-CDC0-4927-9AFC-BAAD1F96B2AE} - C:\Program Files\IObitBar\toolbar\1.bin\i0bar.dll

O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Run\: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Run\: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [slipStream] "C:\Program Files\ONSPEED\onspeedcore.exe"

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Run\: [iObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart

O8 - Extra context menu item: &Search - http://edits.myway.com/menusearch.jhtml?s=100000379&p=YH&si=&a=9E3FD177-A053-424C-B88C-775B8478F1B0&n=2010070801

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\System32\GPhotos.scr/200

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} -

O9 - Extra button: @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab}YInstHelper.YInstStarter.1 - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}Java Plug-in 1.6.0_21 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab

O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD}ScanProcesses.SABScanProcesses.1 - http://www.superadblocker.com/activex/sabspx.cab

O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}Java Plug-in 1.6.0_21 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}Java Plug-in 1.6.0_21 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}Atlcom.get_atlcom - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: IObit Toolbar Service (IObitBarService) - Unknown - C:\Program Files\IObitBar\toolbar\1.bin\i0barsvc.exe

O23 - Service: IS360service (IS360service) - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: YPCService (YPCService) - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE

 

 

Enjoy your week end! Bunty.

[enoskype]

Hi Bunty,

 

I have moved your thread here, as only Malware Fighters can reply you in Spyware-Malware Removal Help! section.

 

Uninstall anything concerning MyWay search.

Please delete: O8 - Extra context menu item: &Search - http://edits.myway.com/menusearch.jh...0&n=2010070801

 

There seems to be nothing seriously wrong with your hijack log, so please post again if you have specific complaints. Then, I will move it back to the original section.

 

Please update your Java 1.6.0_21 to version Java 1.6.0_24, and after that use JavaRa 1.6 to clean the clutter of old Java.

 

Also, update Adobe 9 to Adobe X (10.0.1)

 

Although not malicious, there are some items in your startup that you really do not need and slow down the startup and uses resources such as Real Updater, Adobe Reader Speed Launcher, and Java Quick Starter .

 

BTW, I don't see any Anti-Virus software, please use one but only one A/V software.

 

There may be others to comment on your HijackScan log.

 

Cheers.

[So_sad]

The antivirus situation (meaning the lack of one...) is a priority, for sure.

Once you have an antivirus installed, let it scan your machine. If problems are detected, let us know please.

 

If there are problems with the machine, we need to know as well, because most infections won't show up in a Hijack scan anyway.

 

===

[Bunty]

Many thanks.

 

Hi So Sad, think the sun will shine today - just a thought to cheer you up!

 

Thanks for your excellent suggestions, will get anti virus. Have just uninstalled Avasti as kept telling me I needed to subscribe to Avasti Pro. as I was getting problems and sending large pop ups saying they had just stopped another threat :x. Think they were being put their by Avasti. Used AVG previously!

 

Main problem now is I'm getting redirected every time I try and Google something! :roll:

Thanks again for your help!

 

Kind regards :smile:

 

Bunty

[Leeman]

Hi Bunty,

 

If AVAST pops up a message stopping a threat you can be sure it is doing its

job! AVAST is an excellent Antivirus software and very highly rated. I have had the free version for a few years and I don't get annoying popups that tell me to upgrade to Pro. In fact, it is one of the few that don't ask! As So Sad

relates, which ever one you choose (AVG is good also) you do need one to

protect your PC.

[So_sad]

Hi Bunty :-)

 

Avast is better now than it was a year ago. I would recommend it now, but not AVG Free...

 

Those redirects are highly suspicious. Please go through Step #3 from the following link :

http://forums.iobit.com/showthread.php?t=6216

 

Copy/paste both logs from DDS here, using two replies (one per log), and we'll have a look.

 

Thanks

 

===