2 replies to this topic

[salvatrucho]

Hi everyone. I use McAfee VirusScan Build: 8.0.26. I was performing a Scan and it found a file KillIt.exe Saying it's a potentially unwanted program. Its location is in C:\hp\bin.

I contacted with constumer service at HP and asked what is this KillIt program and they told me to use Hijacthis program http://mjc1.com/mirror/hjt/ , I read the whole page and decide to download the program and submit this topic.

I have already read the FAQ and I do have Ad-aware updated.

My general problem is: why HP told me to download hijackthis?
Also they told to delete some entries:

"
Run HiJackThis and check the following for deletion:

All of the R0 and R1 entries

O4 - HKCU\..\Run: [AddClass] C:\WINDOWS\ADDCLASS.EXE

O4 - HKCU\..\RunServices: [AddClass] C:\WINDOWS\ADDCLASS.EXE

O13 - DefaultPrefix: http://ehttp.cc/?

O13 - WWW Prefix: http://ehttp.cc/?

Let HiJackThis delete the above entries then reboot. It will fix the
issue completely.
"

I read the log and found the R0 and R1 entries but I couldn't find the 04s and 013s

I can send the e-mail from HP if you need it

Thanks in advance

[dave38]

The best thing to do is to post your log here, in a new thread in the malware removal forum. Please ensure that you post the entire log, and, if possible also list what entries you removed.

[salvatrucho]

Ok, the thread is in malware removal forum, thanks dave38