Do I need these files on start up?

[Sarn]

Hi, Can anyone tell me (in very easy to understand language!! <s>) if I need these files on start up - They are on the system start up list I checked on Spybot.

Thanks guys!


Located: HK_CU:Run, Acme.PCHButton
command: C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\pchbutton.exe
file: C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\pchbutton.exe
size: 155648
MD5: 004e6249d5b93fae00b583af6afe98be

Located: HK_CU:Run, BoneIntra
command: C:\DOCUME~1\Owner\APPLIC~1\EXTRAS~1\View Soap.exe
file: C:\DOCUME~1\Owner\APPLIC~1\EXTRAS~1\View Soap.exe
size: 244807
MD5: 2534daef99854dc5863487d2eb440141

Located: HK_CU:Run, Xlludtur
command: C:\WINDOWS\system32\n?tdde.exe
file: C:\WINDOWS\system32\n?tdde.exe
size: -
MD5: d41d8cd98f00b204e9800998ecf8427e

 

[plun]

Hi, Can anyone tell me (in very easy to understand language!! <s>) if I
need these files on start up - They are on the system start up list I
checked on Spybot.

Thanks guys!


Located: HK_CU:Run, Acme.PCHButton
command: C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\pchbutton.exe
file: C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\pchbutton.exe
size: 155648
MD5: 004e6249d5b93fae00b583af6afe98be

Located: HK_CU:Run, BoneIntra
command: C:\DOCUME~1\Owner\APPLIC~1\EXTRAS~1\View Soap.exe
file: C:\DOCUME~1\Owner\APPLIC~1\EXTRAS~1\View Soap.exe
size: 244807
MD5: 2534daef99854dc5863487d2eb440141

Located: HK_CU:Run, Xlludtur
command: C:\WINDOWS\system32\n?tdde.exe
file: C:\WINDOWS\system32\n?tdde.exe
size: -
MD5: d41d8cd98f00b204e9800998ecf8427e

Hi Sandra

Why didnt you post it to a forum ?

The second and third can probably be removed and within
HijckThis you have a backup if
something goes wrong.

Be sure you have HijackThis in a new folder, not in a temp
or desktop folder.

Why have you these DNS entries ?

O17 -
HKLM\System\CCS\Services\Tcpip\..\{197416CF-0E6D-4E79-874B-DEE60B356073}:
NameServer = 195.92.195.95 195.92.195.94

And also this ActiveX
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown
Installer ActiveX Control) -
https://ukplay.toontown.com/download/sv1.0.15.3.1/ttinst.cab

This one you can also kill:
C:\WINDOWS\ALCXMNTR.EXE, Spyware

 

[Sarn]

Sorry, I really don't know much about any of this, but am trying to learn -
will try to find a forum to help...

I have saved hjthis into folder now - was on desktop! Thank you!

Have no idea about dns's - toontown was a disney game my children played...

Will try not to bother you again - sorry...
Sandra

 

[plun]

plun wrote:

Forget one:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://www.nalropgptniuidaa.biz/n2m...qrqG1FT2sfpMB8o9Y9TYUB5rciVktTDZ8_2OeG2q.html

remove with HijackThis

 

[plun]

Sorry, I really don't know much about any of this, but am trying to learn -
will try to find a forum to help...

I have saved hjthis into folder now - was on desktop! Thank you!

Have no idea about dns's - toontown was a disney game my children played...

Will try not to bother you again - sorry...
Sandra

Hi Sandra

Don´t be sorry

It takes a minute to register within forums. You must use a real
mail adress and you got a registration link directly.

I haven´t heard of Ron today and perhaps it is worth a try ?

You can also follow my advices and run HijackThis and remove
my proposals.

 

[Sarn]

Do you know of any forums that would be worth a try? Its really hard to
know who to trust - when starting to check spyware I came across some progs
that say that they help, then when I checked on google they weren't all they
were cracked up to be... Don't want to go the same route with forums as
well... Any help I can get to start to understand what all this means would
be great!!

 

[plun]

Do you know of any forums that would be worth a try? Its really hard to
know who to trust - when starting to check spyware I came across some progs
that say that they help, then when I checked on google they weren't all they
were cracked up to be... Don't want to go the same route with forums as
well... Any help I can get to start to understand what all this means would
be great!!

Hi Sandra

Your HijackThis log was indeed tricky !

As I proposed I do trust these forums:


http://www.aumha.org/a/quickfix.htm

or

http://www.merijn.org/forums.html

Start with Aumha, you have HijackThis experts from that
forum within
this newsgroup.

"Steve Wechsler (akaMowGreen)
MS-MVP 2004-2005 "

I really believe Aumha can help you with this.

 

[Sarn]

Thank you very much! Just doing what you said in the earlier messages has
helped enormously - when I used to connect to web it would say there was an
error - then screen would disappear for a couple of seconds and then be ok
again - then when opening ie I would have a banner at the bottom! All this
has gone now. I will try not to be a pest again! Thank you! Sandra

 

[plun]

I will try not to be a pest again! Thank you! Sandra

Hi Sandra

I am feeling sad about your feelings, you are just a normal user
stucked with this spyware. It is not your fault.

You are not a "pest", you are a human, a Windows user, be proud.

You want your PC to work for yourself and your family
and that is indeed a human right nowadays.

But don´t call yourself for a "pest" about this when you have
problem, this is indeed tricky and difficult.

Happy Computing !