Fix the Following:
C:\WINDOWS\CSRSS.EXE (file is usually either search aide hijacker, HALE Virus, sokacaps virus, ahlem.a virus.
Sometimes a hijacker will load this program at startup to allow accest to your pc.
C:\WINDOWS\LOADQM.EXE (but save so incase you need it for network access)
C:\PROGRAM FILES\COMMON FILES\UPDATER\WUPDATER.EXE (lookup Wupdater removal online).
C:\WINDOWS\SYSTEM\JWJVFC.EXE
C:\WINDOWS\SYSTEM\YWCCBK.EXE
not sure what these two are but probably up to no good.
C:\PROGRAM FILES\APROPOSCLIENT\APROPOS.EXE
This is a real crappy one puts misc porn links in your dialup etc. look up apropos removal cause there are some registry entries to detele also.
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O2 - BHO: (no name) - {C0AE6B60-4005-11D8-A1ED-0010B5585D76} - C:\WINDOWS\SYSTEM\ATIHTT.DLL
O2 - BHO: (no name) - {01C5BF6C-E699-4CD7-BEA1-786FA05C83AB} - C:\PROGRAM FILES\APROPOSCLIENT\APROPOSPLUGIN.DLL
O2 - BHO: NavErrRedir Class - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [csrss] C:\WINDOWS\csrss.exe
O4 - HKLM\..\Run: [3MMR@#94N5MQR9] C:\WINDOWS\SYSTEM\KrxH5g.exe
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\updater\wupdater.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
You do not need to load the power profile twice the second one is usually the bad seed.
There may be some more do a full virus scan after completion and check you program files for folders/programs you did not load.
