Reboot in safe mode (by tapping F8 at startup and select safe mode from the menu). Be sure you're able to
view hidden files and folders, and remove the following files in
bold:
C:\Documents and Settings\DAVID\Application Data\
hcla.exe <-- This File
C:\WINDOWS\System32\
wcpsvit.exe <-- This File
C:\Program Files\Common Files\Real\Update_OB\
realsched.exe <-- This File (RealOne Player spyware)
Next, please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click
fix checked.
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) -
http://www.mt-downlo...tsInstaller.cabThe following are optional and not reuired (fix the ones you don't use, they're using up your RAM):
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
(Quicktime Tray Icon)O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
(MSN Messenger)Reboot your PC.
If you would please, rescan with HijackThis and post a fresh log.