Forums > Computers - Technology

Friend's PC problem

<< < (2/2)

chip!:
whoaaaaaaaaaa...  a bunch of stuff is wrong with that computer

bold are DEFINITELY BAD.. the other are suspicious and i would remove them as well unless you knew for sure otherwise:

C:\Documents and Settings\wawan\Application Data\explorer.exe
C:\Documents and Settings\wawan\Local Settings\Application Data\lsass.exe
C:\Documents and Settings\wawan\Application Data\explorer.exe
C:\Documents and Settings\wawan\Local Settings\Application Data\lsass.exe



and

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\system32\bridge.dll",Load
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\system32\bridge.dll

and

systray = C:\WINDOWS\system32\a.exe


and


PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll
..



boot to Safe-Mode,  I would use AutoRuns but i guess you can use HijackThis to remove those entries...  then delete the files, and reboot, you should be good from there..

SHEEPFISH:
buy a new one

Navigation

[0] Message Index

[*] Previous page