Jump to content


HP sent me here

  • This topic is locked This topic is locked
2 replies to this topic

#1 salvatrucho



  • Full Member
  • Pip
  • 21 posts

Posted 20 May 2004 - 01:22 PM

Hi everyone. I use McAfee VirusScan Build: 8.0.26. I was performing a Scan and it found a file KillIt.exe Saying it's a potentially unwanted program. Its location is in C:\hp\bin.

I contacted with constumer service at HP and asked what is this KillIt program and they told me to use Hijacthis program http://mjc1.com/mirror/hjt/ , I read the whole page and decide to download the program and submit this topic.

I have already read the FAQ and I do have Ad-aware updated.

My general problem is: why HP told me to download hijackthis?
Also they told to delete some entries:

Run HiJackThis and check the following for deletion:

All of the R0 and R1 entries


O4 - HKCU\..\RunServices: [AddClass] C:\WINDOWS\ADDCLASS.EXE

O13 - DefaultPrefix: http://ehttp.cc/?

O13 - WWW Prefix: http://ehttp.cc/?

Let HiJackThis delete the above entries then reboot. It will fix the
issue completely.

I read the log and found the R0 and R1 entries but I couldn't find the 04s and 013s

I can send the e-mail from HP if you need it

Thanks in advance

#2 dave38


    Devout Murphyite!

  • Retired Staff
  • PipPipPipPipPip
  • 8,508 posts

Posted 20 May 2004 - 05:14 PM

The best thing to do is to post your log here, in a new thread in the malware removal forum. Please ensure that you post the entire log, and, if possible also list what entries you removed.
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum

#3 salvatrucho



  • Full Member
  • Pip
  • 21 posts

Posted 20 May 2004 - 09:45 PM

Ok, the thread is in malware removal forum, thanks dave38

Member of UNITE
Support SpywareInfo Forum - click the button