NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!
Overview:
IEPlugin is an IE BHO that monitors web site addresses you visit, form contents
and even your local file browsing! It also automatically updates and adds a few
items to your favorites list. On top of this it will display ads when it finds
certain keywords in your browser.
brought to you by: http://www.ieplugin.com
Destroy Autorun:
Delete the following keys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Win Server
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Win Server Updt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Win Server Updt
[C:\WINDOWS\wupdt.exe]
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Win Server Updt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\conscorr
Reboot
your system then:
Make sure
you click start --> Run and type in msconfig. Then select the startup tab. Any
references to the processes below should be deleted
End
Processes (may or may not exist):
extract.exe
se.exe
systb.exe
wdskctl.exe
wupdt.exe
winserv.exe
Unregister DLLs:
Tip: this is only a list of known files/locations. You will want to do a
search by the name of the file to see if they're on your system.
A while back I wrote a guide to
Register/remove DLL or AX
files which you will need if you don't know how to unregister these files.
Each file
is in several locations so you'll need to search for them and unregister +
delete them in every location you find.
ieplugin.dll
se.dll
systb.dll
winobject.dll
Clean your Registry:
You should
be back to normal IF this was your only problem. I suggest you post in our HJT
forum since its not likely that this is your only bug.
Read this first