Hi:

I am having a similar problem to the one logged by another user. When I am in Internet explorer, it opens a windows zedo page. I dont remember the message but it has http and then zedo1.com -- I followed the advice in a prior log where Sami recommended blocking zedo.com and bix; I am in the process of running Hijackthis. Log file has been attached. When I ran it I may have mitakenly selected the "fix selected button".

Lastly when I got to run ewido anti malware it bring up the full trial version of AVG. Should I run this since I currently have a free version of AVG. I have noticed with the free version lately that my update manager is always updated which does not make sense. Is there a malaware that is giving me this false version?

Attached Files

hijackthis.log (9.1 KB, 965 views)

Go her and paste the hjt log file in box and it will analyse it for you. Remove all entries that it suggest that are malware...

HijackThis Logfileauswertung

Thanks for the response -- very helpful. Provided me with specifics on which files -- none were noted as malaware. Does that imply that I am OK leaving the following files that have a ? on my laptop?

I am not familiar with any of these files with ? -- the first three appear to be from AOL and AVG which I have on my laptop. The 4th file (file 04) it says is deactivated --not sure what to do. The (016) files may be related to the linked in site of which I am a member. The (023) file I am not sure about.

C:\PROGRA~1\COMMON~1\AOL\116520~1\EE\AOLHOS~1.EXE - unknown process. Possibly nasty! According to our database this process runs normally in c:\.*aol\.*antispywareapp.*\! Check if you know this process and arrange a viruscheck where required. AOL AntiSpyware

C:\PROGRA~1\COMMON~1\AOL\116520~1\EE\AOLServiceHos t.exe ----
Possibly nasty! According to our database this process runs normally in c:\programme\gemeinsame dateien\aol.*\! Check if you know this process and arrange a viruscheck where required. AOL Software related


C:\PROGRA~1\AVG\AVG8\aAvgApi.exe - unknown process. ( I do own AVG antivirus program. )

O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\WINDOWS\system32\ieso0.dll (file missing) - deactivated entry that can be fixed. Lotus organizer. Can this be deleted?

O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} (LinkedIn ContactFinderControl) - http://www.linkedin.com/cab/LinkedIn...derControl.cab
Very safe Check if you know this site and fix it if you do not. Unknown ActiveX-Objects, or ActiveX-Objects from unknown sites should always be fixed. If the name of the ActiveX-Object or the URL contains the words 'dialer', 'casino', 'free plugin' etc, it should be fixed!

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - same message as above

O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe --- Unknown service. (nmraapache.exe)


Thanks Shabira