[BRAV0872]

PC is great,

Are you able to identify any of the following (from a HighJackThis scan) I do not use America Online service.........

C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe

O14 - IERESET.INF: START_PAGE_URL=http://www.cyberpowersystem.com

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

...........and can they be safely removed with HighJackThis?

thanks a lot!

Edited by BRAV0872, 06 September 2005 - 02:22 PM.

[Advertisements]

Let us clean up your PC a little bit.


Delete the following programs and the associated folders, which you downloaded during the cleaning up process -

smitrem.exe
smitrem folder

Uninstall Ewido as it is a trial product and the trial period will expire shortly. Conflicts can arise between multiple anti-virus programs and can severely hamper the performance of the PC.



Run Hijack This and click on scan. The following items need to be fixed -

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O14 - IERESET.INF: START_PAGE_URL=http://www.cyberpowersystem.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{448F7BC7-78D4-4FD0-B653-97591B101F08}: NameServer = 195.95.218.36,85.255.112.15
O17 - HKLM\System\CCS\Services\Tcpip\..\{44FB98C1-338A-4DDE-9141-E44FDD0D76C6}: NameServer = 195.95.218.36,85.255.112.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{448F7BC7-78D4-4FD0-B653-97591B101F08}: NameServer = 195.95.218.36,85.255.112.15


Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

This will not delete the programs from your PC. This will only disable the programs from running at Start up and result in a faster PC. You can always run the programs manually by using the respective exe files or the shortcuts.


Regarding the entries of AOL, It is better to uninstall them through the Control panel ---> Add or Remove Programs.

After this, please visit Windows security and critical updates and get all the updates and patches and install them on your PC.

Reboot the PC and post a fresh HJT log.

[tampabelle]

Let us clean up your PC a little bit.


Delete the following programs and the associated folders, which you downloaded during the cleaning up process -

smitrem.exe
smitrem folder

Uninstall Ewido as it is a trial product and the trial period will expire shortly. Conflicts can arise between multiple anti-virus programs and can severely hamper the performance of the PC.



Run Hijack This and click on scan. The following items need to be fixed -

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O14 - IERESET.INF: START_PAGE_URL=http://www.cyberpowersystem.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{448F7BC7-78D4-4FD0-B653-97591B101F08}: NameServer = 195.95.218.36,85.255.112.15
O17 - HKLM\System\CCS\Services\Tcpip\..\{44FB98C1-338A-4DDE-9141-E44FDD0D76C6}: NameServer = 195.95.218.36,85.255.112.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{448F7BC7-78D4-4FD0-B653-97591B101F08}: NameServer = 195.95.218.36,85.255.112.15


Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.

This will not delete the programs from your PC. This will only disable the programs from running at Start up and result in a faster PC. You can always run the programs manually by using the respective exe files or the shortcuts.


Regarding the entries of AOL, It is better to uninstall them through the Control panel ---> Add or Remove Programs.

After this, please visit Windows security and critical updates and get all the updates and patches and install them on your PC.

Reboot the PC and post a fresh HJT log.

[tampabelle]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.