If E-Liam doesn't show up in the next half hour I'll reply.
Not an expert by any means but I think I might be able to help you a little bit.
DeepC
Rotorcraig,
I believe a call to Trend Micro House Call is in order to begin with!
You are going to have to excuse me here. I have posted the entries that I believe need fixing but I really think that you should wait till E-Liam has a peep at this thread and confirms what I am saying is kosher. He\'s lurking online now so perhaps he might care to add his 2p. He can add his cut and paste top and bottom!
Trying to learn the black art of HJT and using your thread for practice. I believe a call to Trend Micro House Call is in order to begin with!
DeepC
----------------------------------------------------
C:\\WINNT\\DHUpdt.exe
C:\\WINNT\\dhbrwsr.exe
C:\\Program Files\\Windows AdControl\\WinAdCtl.exe
C:\\Program Files\\Windows AdControl\\WinAdAlt.exe
C:\\WINNT\\dhsvr.exe
O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\\WINNT\\bxxs5.dll
O2 - BHO: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\\WINNT\\dealhlpr.dll
O3 - Toolbar: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\\WINNT\\dealhlpr.dll
O4 - HKLM\\..\\Run: [Explkw] C:\\WINNT\\System32\\expup.exe
O4 - HKLM\\..\\Run: [DealHelperUpdate] C:\\WINNT\\DHUpdt.exe
O4 - HKLM\\..\\Run: [DealHelperBrwsr] C:\\WINNT\\dhbrwsr.exe
O4 - HKLM\\..\\Run: [stcinstaller] c:\\installer\\id53.exe
O4 - HKLM\\..\\Run: [bxxs5] RunDLL32.EXE C:\\WINNT\\bxxs5.dll,DllRun
O4 - HKLM\\..\\Run: [Windows AdControl] C:\\Program Files\\Windows AdControl\\WinAdCtl.exe
O4 - HKCU\\..\\Run: [ClockSync] C:\\PROGRA~1\\CLOCKS~1\\Sync.exe /q
O4 - HKCU\\..\\Run: [msmc] C:\\WINNT\\system32\\msmc.exe
O18 - Filter: text/html - {CC905FF6-B553-496C-9DFA-CFF65ADCD0FC} - C:\\WINNT\\System32\\msdhmd.dll
If you don\'t recognise any of the following then check these also.
O8 - Extra context menu item: Search with Wanadoo - res://C:\\PROGRA~1\\Wanadoo\\WSBar\\WSBar.dll/VSearch.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\\WINNT\\web\\related.htm
O9 - Extra \'Tools\' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\\WINNT\\web\\related.htm
Last edited by DeepC; 4th February 2005 at 17:13.