[gerryf]

for the moment, all of these can go

R3 - URLSearchHook: (no name) - {5857ADAC-BDD8-C990-D4B5-F024204BBF0F} - (no file)
O2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\System32\fixos.dll (file missing)
O3 - Toolbar: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\System32\fixos.dll (file missing)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {11212111-2121-1311-1141-115611111222} - ms-its:mhtml:file://d: oo.mht!http://195.95.218.82...hm::/update.exe


this is, I think, your issue
I believe it is a new variation of the coolwebsearch

check and fix this
O20 - Winlogon Notify: style2 - C:\WINDOWS\q375663968_disk.dll

then
download and run
http://www.intermute...r_download.html

[Advertisements]

nope, the Windows explorer error box keeps popping up after everything boots up...still same problem...."windows explorer has encountered a problem and needs to close. we are sorry for the inconvenience." keeps popping up and after i hit "don't Send" it reboots the screen except its in the "active desktop recovery" screen.

i think it's something to do with my internet explorer program...when i end the explorer.exe program, the error message doesn't come back up....but my bottom toolbar is gone....

Edited by L0$t, 16 June 2005 - 02:43 PM.

[L0$t]

nope, the Windows explorer error box keeps popping up after everything boots up...still same problem...."windows explorer has encountered a problem and needs to close. we are sorry for the inconvenience." keeps popping up and after i hit "don't Send" it reboots the screen except its in the "active desktop recovery" screen.

i think it's something to do with my internet explorer program...when i end the explorer.exe program, the error message doesn't come back up....but my bottom toolbar is gone....

Edited by L0$t, 16 June 2005 - 02:43 PM.

[L0$t]

anyone have any other suggestions

[gerryf]

explorer is not internet explorer

explorer is your shell.

Something you had has seriously screwed up your shell and it is not obvious in hijackthis...did the cwsshredder find anything?

[L0$t]

explorer is not internet explorer

explorer is your shell.

Something you had has seriously screwed up your shell and it is not obvious in hijackthis...did the cwsshredder find anything?

couldn't download it....we have limited access in certain areas at work.....
would running Spybot S&D help any....

[gerryf]

it might..running anything listed here:
http://www.geekstogo..._Log-t2852.html

might help


it is tough to say the way you are doing it.

when you disabled the 020 setting in hijackthis, did it return?

[L0$t]

it might..running anything listed here:
http://www.geekstogo..._Log-t2852.html

might help
it is tough to say the way you are doing it.

when you disabled the 020 setting in hijackthis, did it return?

yes the 020 setting is back....and every time i fix it and it comes back......

Edited by L0$t, 16 June 2005 - 03:33 PM.