Another friends HijackThis log

[tal ormanda]

Ok I will be fixing this persons laptop in a few days and I wanted you all to take a peak at this

Please see attachment

logfile.txt

Edited January 22, 2009 by Yzöwl
codebox wouldn't fix! replaced with attachment

[nitroshift]

There are a few entries in the log that appear dodgy to say the least. Could you upload the log as an attachment?

[Yzöwl]

@nitroshift It was added as an attachment two and a half hours before you posted!

@tal ormanda The following entries are suspect

C:\Users\Beth\AppData\Local\Temp\a.exe

C:\Users\Beth\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Beth\AppData\Local\Temp\~tmpc.exe


O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing)


O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing)


O4 - HKLM\..\Run: [1910244427] "C:\ProgramData\704107046\1910244427.exe"

O4 - HKCU\..\Run: [MSFox] C:\Users\Beth\AppData\Local\Temp\a.exe

[tal ormanda]

Anything that you recommend to use to remove these? This is an Acer laptop. Do they put backup partitions on these to restore the OS or did you have to create it on a disc when you would buy the system?

Edited January 22, 2009 by tal ormanda