[*]Please set your system to show
all files; please see here if you're unsure how to do this.
Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.
O4 - HKLM\..\Run: [firlnin] C:\Documents and Settings\porter\Local Settings\Temporary Internet Files\Content.IE5\3Y1V1KN8\delf061225[1].exe
O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitecik32.exe
When finished exit HijackThis.
Using Windows Explorer, locate the following files/folders, and delete them:
C:\Documents and Settings\porter\Local Settings\Temporary Internet Files\Content.IE5\3Y1V1KN8\delf061225[1].exe
C:\windows\system32\elitecik32.exe
Exit Explorer, and reboot as normal afterwards.
Let the system reboot.
Post back a fresh HijackThis log and we will take another look.
Edited by TomNJ, 01 July 2005 - 11:49 AM.