Please run a free trojan scan here:
http://www.moosoft.com/Please delete your temporary files. Double Click
My Computer (WinXP: Navigate to Start --->My Computer) You will see an icon representing your harddrive (most likely C: Drive) Right Click on the hard drive icon and click
Properties at the
bottom of the fly out window. One the very first tab (General) you will see a button labeled "Disk Cleanup"...click that button.
Make sure the following are checked:
Downloaded Program Files
Temporary Internet Files and
Recycle BinClick
OK and Disk Cleanup will delete those files for you.
Download
Ad-aware from:
http://www.geekstogo...n=download&id=5Install the program and launch it.
First, in the main window, look in the bottom right corner and click on
Check for updates now and download the latest reference files.
Next, we need to configure Ad-aware for a full scan.
-> Click on the
Gear icon (second from the left) to access the preferences/settings window
1. In the
General window make sure the following are selected:
- Automatically save log-file
- Automatically quarantine objects prior to removal
- Safe Mode (always request confirmation)
2. Click on the
Scanning button on the left and select :
- Scan Within Archives
- Scan Active Processes
- Scan Registry
- Deep Scan Registry
- Scan my IE favorites for banned URL’s
- Scan my Hosts file
- Under Click here to select drives + folders, choose:
- All of your hard drives
-> Click on the
Advanced button on the left and select:
- Include additional process information
- Include additional file information
- Include environment information
- Include additional object details
-> Click the
Tweak button and select:
- Under the Scanning Engine:
- Unload recognized processes during scanning
- Include basic Ad-aware settings in logfile
- Include additional Ad-aware settings in logfile
- Under the Cleaning Engine:
- Let Windows remove files in use at next reboot
-> Click on
Proceed to save the settings.
-> Click
Start and on the next screen choose
Activate in-depth Scan at the bottom of the page and then choose:
- Use Custom Scanning Options
-> Click
Next and
Ad-aware will scan your hard drive(s) with the options you have selected.
-> Save the log file when it asks and then click
Finish-> When finished, mark everything for removal and get rid of it. (Right-click the window and choose
Select All from the drop down menu and click
Next).
You may wish to print out a copy of these instructions to follow while you complete this procedure.Please save Hijack This in a permanent folder (i.e. C:\HJT). This ensures backups are saved and accessible.
Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click
fix checked.
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
The following are not necessarily spyware/malware, but we suggest you place a check mark next to the following entries, as these programs may be taking up system resources.O4 - HKLM\..\Run: [TkBellExe] \"C:\Program Files\Common Files\Real\Update_OB\realsched.exe\" -osboot
(Description: RealPlayer scheduler. Completely unnecessary. Removing this entry will free up a small amount of system resources.)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
(Description: System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel. Removing this entry will free up a small amount of system resources. )
O4 - HKLM\..\Run: [IPInSightMonitor 01] \"C:\Program Files\Verizon Online\Visual IP InSight\IPMon32.exe\"
(Description: Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information )
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
(Description: Microsoft Office startup assistant. Not necessary. Removing this entry will free up a significant amount of system resources.)
Reboot your PC.
If you would please, rescan with HijackThis and post a fresh log in this same topic, and let us know how your system's working.