Sir Speedy!?! HJT Help!

[SurferJoe46]

Not MY 'puter - just helping a friend here::::

Win7, 64Bit Compaq Presario (sp?) and 1G RAM

HJT reports that there's a 'something running' that cannot be cleaned, cured nor repaired as it's in the Registry.

I had to Google the {xxxxxxxx} HJT result numbers to see what it really was, and the results told me that bad info, not HJT.de/

It's in the R02 area.

OK - I've got a OEM Win 7 disc coming in the mail - but interestingly enough I am just fooling around anyway until the clean install disc arrives and whenever I try to run HJT, I get a message that the Host Files are missing/unavailable.

Checking the Security tab in the Internet Security card, there are NO Host files in it at all.

Whazzup with that?

[Speedy Gonzales]

Just copy your hosts file to his/hers

To c:\windows\system32\drivers\etc. HJT isnt really compatible with 64 bit either. So, the hosts file maybe there. Look at that folder <- see if its there

[SurferJoe46]

Is this malware activity?

This unit's getting nasty pop-ups and it's always trying to dial out or get the DSL turned on.

I think it's trying to call the mother ship.

I see things like::

@keyiso.dll
@comres.dll
WatUX.exe
\bengine.exe
\snmptrap.exe
samsrv.dll
\psbase.exe
\fxsresm.dll
\efssvc.dll
{CCC7A320-B3CA-4199-B16A-9F516DD69829) - no file
This (^) is the baddie I think.

[Speedy Gonzales]

I need the whole log. Boot into safe mode / networking then post a log

[SurferJoe46]

I tried but it won't c/p the log into Word or Word pad.

[SurferJoe46]

Let me try Word Bridge

[Speedy Gonzales]

Get teamviewer. Send the ID and pw to me in a PM. I'll have a look from here. Boot into safe mode / networking and install/run it

[SurferJoe46]

OK
TIA