Awtqo.dll prob!!!!!help!!!!!!!urgent

BullGuard Antivirus Forum > General Security > Spyware > Awtqo.dll prob!!!!!help!!!!!!!urgent

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

salival
New Member

Date Joined Apr 2006
Total Posts : 1

Posted 4-12-2006 7:56 (GMT +1)

any kind of help would be greatly appreciated....

here's a copy of my hijackthis log file :

Logfile of HijackThis v1.99.1
Scan saved at 11:33:17 PM, on 4/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Prevx1\PXAgent.exe
D:\Program Files\QuickTime\qttask.exe
C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\WINDOWS\System32\rundll32.exe
D:\Program Files\Prevx1\PXConsole.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Intel\Intel(R) Active Monitor\imonnt.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\WINDOWS\explorer.exe
D:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

http://searchbar.findthewebsiteyouneed.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

http://searchbar.findthewebsiteyouneed.com
O2 - BHO: (no name) - {20D57A66-F7DF-467d-907B-9B7F4A118AB7} - D:\WINDOWS\System32\awtqo.dll
O2 - BHO: InfoDocReader Object - {295BA105-3506-4D25-B0DD-54346320BDC5} -

D:\WINDOWS\System32\jkkjh.dll
O2 - BHO: (no name) - {6001CDF7-6F45-471b-A203-0225615E35A7} - D:\WINDOWS\DH.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program

files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [zxwin] rundll32.exe D:\WINDOWS\System32\zxwin.dll,start
O4 - HKLM\..\Run: [keyboard] C:\windows\keyboard10.exe
O4 - HKLM\..\Run: [mousepad] C:\windows\mousepad10.exe
O4 - HKLM\..\Run: [newname] C:\windows\newname10.exe
O4 - HKLM\..\Run: [msconfig38] mssvcc.exe
O4 - HKLM\..\Run: [secures23] mssecure.exe
O4 - HKLM\..\Run: [Cryptographic Service] D:\WINDOWS\System32\tddczawq.exe
O4 - HKLM\..\Run: [PrevxOne] D:\Program Files\Prevx1\PXConsole.exe
O4 - HKLM\..\RunServices: [msconfig38] mssvcc.exe
O4 - HKLM\..\RunServices: [secures23] mssecure.exe
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: &Google Search - res://d:\program

files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program

files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program

files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program

files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Similar Pages - res://d:\program

files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program

files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program

Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program

Files\Messenger\MSMSGS.EXE
O16 - DPF: {64311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab
O16 - DPF: {E cellSpacing=5 cellPadding=3 width=400} -
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

"D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: awtqo - D:\WINDOWS\SYSTEM32\awtqo.dll
O20 - Winlogon Notify: CSCSettings - D:\WINDOWS\system32\kt64l7jq1.dll (file missing)
O20 - Winlogon Notify: ddcyy - ddcyy.dll (file missing)
O20 - Winlogon Notify: Extensions - D:\WINDOWS\system32\irxwan.dll (file missing)
O20 - Winlogon Notify: jkkjh - D:\WINDOWS\System32\jkkjh.dll
O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - D:\WINDOWS\System32\hwclock.exe (file

missing)
O23 - Service: Intel(R) Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel(R) Active

Monitor\imonnt.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - D:\Program Files\Prevx1\PXAgent.exe" -f (file

missing)
O23 - Service: RADNET - Unknown owner - D:\WINDOWS\radnet32.exe (file missing)

smpinfo
New Member

Date Joined Feb 2008
Total Posts : 1

Posted 2-29-2008 10:33 (GMT +1)

Here is a solution I found and it worked for mo

I went back out to see if there were updates and they have the latest updates on their site
So go to http://vundofix.atribune.org/
Download the VundoFix.exe to your desktop.
Double-click VundoFix.exe to run it.
Put a check next to Run VundoFix as a task.
You will receive a message thst says vundofix will close and re-open in a minute or less. Click OK
When VundoFix re-opens, click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.

Stefan Pfeil

SMP Info Tech

techdd@smpinfo.com

www.smpinfo.com

Forum Information

Currently it is Saturday, November 21, 2009 9:51 PM (GMT +1)
There are a total of 73.034 posts in 17.116 threads.
In the last 3 days there were 13 new threads and 67 reply posts. View Active Threads