[xxlucienxx]

In one of my prior posts, I was curious as to what these HJT log entries are:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...ario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...ario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...ario&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

Just wondering if I can or should fix them or not.

[Advertisements]

You can fix the ie.redirect.hp entries.
They were put there by the manufacturer of your PC, but they are not necessary.

The localhost is best left alone.
It can end up giving you problems if you fix that one.

You can delete this file:
C:\WINDOWS\Digital Signature 20050113.htm

It should go without problems. Keep it in the recycle bin for a few days, just in case it does turns out to be usefull. (It shouldn't be important)

Regards,

[Metallica]

You can fix the ie.redirect.hp entries.
They were put there by the manufacturer of your PC, but they are not necessary.

The localhost is best left alone.
It can end up giving you problems if you fix that one.

You can delete this file:
C:\WINDOWS\Digital Signature 20050113.htm

It should go without problems. Keep it in the recycle bin for a few days, just in case it does turns out to be usefull. (It shouldn't be important)

Regards,

[xxlucienxx]

Okay sounds good, now how do I clean up that SmartPops spyware?

[Metallica]

The next Spybot scan should not find it or be able to permanently remove it.

Let me know,

[xxlucienxx]

Here is the Spybot results showing that it could not fix the SmartPops spyware:

Network Essentials.SmartPops: Data (File, fixing failed)
C:\WINDOWS\Digital Signature 20050113.htm


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-09-08 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2005-10-07 Includes\Cookies.sbi (*)
2005-10-07 Includes\Dialer.sbi (*)
2005-10-07 Includes\Hijackers.sbi (*)
2005-10-07 Includes\Keyloggers.sbi (*)
2005-10-07 Includes\Malware.sbi (*)
2005-10-07 Includes\PUPS.sbi (*)
2005-10-07 Includes\Revision.sbi (*)
2005-10-07 Includes\Security.sbi (*)
2005-10-07 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2005-10-07 Includes\Trojans.sbi (*)

[Metallica]

Can you check if that file actually came back?
I asked you to delete it manually earlier. Did that work?

Regards,

[xxlucienxx]

Okay, I failed to delete it before. I deleted it and Spybot now shows a clean run. It seems like everything is working great now.
Thanks for your help and patience!!!

[Metallica]

No problem.

Glad we could help.

Please do have a look at my site about removing and preventing spyware.

Regards,