Hello seskill,
Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://dfiles/
O9 - Extra button: SurfLite Toolbar - {6226BA26-C017-4007-928C-DE9715C6FA68} - C:\Program Files\IESurfBar\SurfLite Toolbar\dyn_surflite_aff_1000.dll
O9 - Extra 'Tools' menuitem: SurfLite Toolbar - {6226BA26-C017-4007-928C-DE9715C6FA68} - C:\Program Files\IESurfBar\SurfLite Toolbar\dyn_surflite_aff_1000.dll
Now close all windows other than HiJackThis, then click Fix Checked. Close HijackThis.
Using Add Or Remove Programs remove the following entries (if present): (To get into add Or Remove Programs press the START button > Control Panel > Add Or Remove Programs. ))
Azureus 3.0
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6 Update 1
Java(TM) SE Runtime Environment 6
LimeWire PRO 4.17.1
SurfLite Toolbar
Viewpoint Media Player
Please download OTMoveIt3 by OldTimer and save it to your desktop
- Double-click OTMoveIt3.exe to run it.
- Copy the lines in the codebox below. ( Make sure you include :Files )
Code:
:Files
C:\WINDOWS\system32\paajvh.dll
C:\WINDOWS\system32\odrxycdm.dll
C:\WINDOWS\system32\tffxomoc.ini
C:\WINDOWS\system32\swmjuybi.ini
C:\Documents and Settings\Nick Sheard\Application Data\inst.exe
C:\WINDOWS\system32\5b7b0424-.txt
C:\69069.exe
C:\18518.exe
C:\29340.exe
C:\28437.exe
C:\9087.exe
C:\72782.exe
C:\63718.exe
C:\5121.exe
:Folders
C:\Program Files\IESurfBar
C:\Program Files\Azureus
C:\Program Files\LimeWire
C:\Program Files\Viewpoint\Viewpoint Media Player
:Commands
[Purity]
[EmptyTemp]
- Return to OTMoveIt3, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
- Click the red Moveit! button.
- Copy everything in the Results window (under the green bar), and paste it in your next reply.
- Close OTMoveIt3
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
Please post back with the OTMoveIt log and a new RSIT log in your next reply.