Home > General > Qomjjii.dll


If it hasn't been that long, there may be a problem with the date that it thinks you installed it. Free Tools for Fighting Malware Anti-Virus: avast! Close any programs you may have running - especially your web browser.8. Thread Tools Search this Thread 02-09-2008, 05:47 AM #1 Watto81 Registered Member Join Date: Nov 2007 Posts: 14 OS: win xp sp2 Hi guys, Can you please help with

Final Check:Remaining Services:------------------Authorized Application Key Export:[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019""C:\\Program Files\\MSN Messenger\\msrr.exe"="C:\\Program Files\\MSN Messenger\\msrr.exe:*:Disabled:Messenger""C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes""E:\\Program Files\\uTorrent\\utorrent.exe"="E:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:µTorrent""C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer""C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0""C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.9. Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Double click on combofix.exe & follow the prompts.When finished, it will produce a report for you.

LOP Problem Started by GarthRodgers, Jan 18 2007 03:46 AM This topic is locked 11 replies to this topic #1 GarthRodgers GarthRodgers Member Full Member 10 posts Posted 18 January 2007 Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 To learn more and to read the lawsuit, click here. When I ran it again in normal mode (for which the log is below), it scanned without any problem Logfile of HijackThis v1.99.1Scan saved at 22:34:04, on 21/01/2007Platform: Windows XP SP2

  1. Type Y to begin the script.
  3. MS MVP 2009-20010 and ASAP Member since 2005 Back to top #9 GarthRodgers GarthRodgers Member Full Member 10 posts Posted 23 January 2007 - 11:37 AM Thanks for the firewall recomendation.
  4. Uncheck "Activate OnGuard".You can reenable it once your system is clean.You are running Download Accelerator Plus – This is a download accelerator that delivers popup/popunder ads, and tracks your internet usage.
  5. scanning hidden registry entries ...

Please follow these instructions to disable it:To deactivate Spyware Doctor's OnGuard Tools1. I don't see one in your HijackThis log. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can delete SDFix.exe from your desktop now if you would like.I've also noticed that when AVG Anti-Spyware loads at startup, its resident shield is disabled.

When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons. Free Tools for Fighting Malware Anti-Virus: avast! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! The page will refresh.6.

I've now installed Kerio and updated Java. C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\WgaTray.exe C:\Program Files\iPod\bin\iPodService.exe . ************************************************************************** . Help would be much appreciated. I wasn't sure if you hadn't removed it intentionally, or if you had tried and it was being stubborn Is SDFix there for a reason?Notice that it says "Potentially unwanted tool"

Press any Key and it will restart the PC. MS MVP 2009-20010 and ASAP Member since 2005 Back to top #6 GarthRodgers GarthRodgers Member Full Member 10 posts Posted 22 January 2007 - 03:50 PM Thanks againI removed the MyWebSearch Attempting to delete C:\WINDOWS\system32\tuvuutq.dllC:\WINDOWS\system32\tuvuutq.dll Has been deleted!Performing Repairs to the registry.Done!Thanks Again,GarthRodgers Back to top #5 TheJoker TheJoker Forum Deity Boot Camp Mod 14,365 posts Posted 21 January 2007 - 09:38 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft

Please let me know what you did.O8 - Extra context menu item: &Search - http://edits.mywebse...?p=ZNxmk121YYGBNow close all browser and other windows except for HijackThis, and click "Fix Checked" to have HijackThis A case like this could easily cost hundreds of thousands of dollars. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review. Please post the contents of C:\*vundofix.txt* in your next reply.Note: It is possible that VundoFix encountered a file it could not remove.In this case, VundoFix will run on reboot, simply follow

Normal Mode: Checking Files: Trojan Files Found: C:\Documents and Settings\user\Favorites\Online Security Guide.lnk - Deleted C:\WINDOWS\sdrive\helpPk.exe - Deleted C:\WINDOWS\sdrive\service.bat - Deleted C:\logn.exe - Deleted Folder C:\WINDOWS\sdrive - Removed Removing Temp Files... Open the extracted SDFix folder and double click RunThis.bat to start the script. Please try the request again. Please then reboot your computer in Safe Mode by doing the following :Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, tap the F8

Post the content of these logfiles in your next reply.Download SDFix and save it to your desktop. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. Repeat as many times as necessary to remove each Java version.12.

I forget what it said though (sorry)...

I can turn it on again easily, but I just don't get why it's not turned on in the first place.Thanks again for your help,GarthRodgers Back to top #8 TheJoker TheJoker Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll Attempting to delete C:\WINDOWS\system32\nnnnoop.dllC:\WINDOWS\system32\nnnnoop.dll Has been deleted! scanning hidden autostart entries ...

Register now! MS MVP 2009-20010 and ASAP Member since 2005 Back to top #4 GarthRodgers GarthRodgers Member Full Member 10 posts Posted 21 January 2007 - 05:44 PM Hey Thanks for your help.Here Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt (Report.txt will also be copied to Clipboard ready for posting If you decide to uninstall it, go to Start > Settings > Control Panel > Add or Remove Programs and remove any of the following programs, if found:My Search BarMyWay Speed

Performed disk cleanup. -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2008-02-09 23:32:28 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (6.00.2900.2180) Boot This is a search bar that hijacks your searches and targets them against their own site, and I highly recommend you uninstall it. Scroll down to where it says 'Java Runtime Environment (JRE) 6 update 3'.3. Click the "Download" button to the right.4.

Qomjjii.dll Started by drakerpg , Nov 07 2007 02:41 PM Please log in to reply 3 replies to this topic #1 drakerpg drakerpg Members 2 posts OFFLINE Local time:10:44 PM I included it below as an optional fix just in case.Now you need to run HijackThis and click "Do a system scan only." Place a check next to the following entries C:\WINDOWS\system32\efcaaby.dll C:\WINDOWS\cookies.ini C:\WINDOWS\system32\ddccddb.dll C:\WINDOWS\system32\dxkjidux.dll C:\WINDOWS\system32\efcaaby.dll C:\WINDOWS\system32\eytnquvk.dll C:\WINDOWS\system32\faciludw.dll C:\WINDOWS\system32\flouxrca.dll C:\WINDOWS\system32\iifccax.dll C:\WINDOWS\system32\iiffddb.dll C:\WINDOWS\system32\lbpnimhc.dll C:\WINDOWS\system32\ljjjkih.dll C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\mlnmp.bak1 C:\WINDOWS\system32\mlnmp.bak2 C:\WINDOWS\system32\mlnmp.ini C:\WINDOWS\system32\ocwwcfsv.ini C:\WINDOWS\system32\pmnkklm.dll C:\WINDOWS\system32\pmnlm.dll C:\WINDOWS\system32\prqss.bak1 C:\WINDOWS\system32\prqss.bak2 C:\WINDOWS\system32\prqss.ini C:\WINDOWS\system32\prqss.ini2 C:\WINDOWS\system32\qumjlppm.dll C:\WINDOWS\system32\rcjqibjp.dll C:\WINDOWS\system32\ssqrsqr.dll C:\WINDOWS\system32\ukanjvha.ini C:\WINDOWS\system32\ukvrhxqa.dllbox . ((((((((((((((((((((((((((((((((((((((( Drivers/Services Free Antivirus / Avira Free AntiVirus OnLine Anti-Virus: ESET / BitDefender / F-Secure Anti-Malware: Malwarebytes' Anti-Malware / Dr.Web CureIt Spyware/Adware Tools: MVPS HOSTS File / SpywareBlaster Firewall: Comodo Firewall Free /

Removing ADS...system32: deleted 70570 bytes in 1 streams.Checking for remaining StreamsC:\WINDOWS\system32No streams found. We apologize for the delay; our helpers have been very busy.If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the You can find safer alternatives Here.If you decide to uninstall Download Accelerator Plus as recommended, go to Start > Control Panel > Add or Remove Programs and remove the following program:Download When completed, it will prompt that it will reboot your computer, click *OK*.