Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old September 20th, 2004, 12:00 AM
teacher4u teacher4u is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Location: Alhambra CA
Posts: 165 teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 8 h 3 m 23 sec
Reputation Power: 7
Send a message via AIM to teacher4u Send a message via Yahoo to teacher4u
about:blank removal?

about:blank has seized control my IE and now automatically becomes my start page. It also pops up tons of ads everywhere I go!(Even google!) I tried to do trend micro housecall and it kept shutting me down. Need help,Tom Myboy,Anybody? Thankyou! teacher4u

Reply With Quote
  #2  
Old September 20th, 2004, 12:10 AM
StartUpMan StartUpMan is offline
Banned
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2004
Posts: 275 StartUpMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Quote:
Originally Posted by teacher4u
about:blank has seized control my IE and now automatically becomes my start page. It also pops up tons of ads everywhere I go!(Even google!) I tried to do trend micro housecall and it kept shutting me down. Need help,Tom Myboy,Anybody? Thankyou! teacher4u


A multitiude of problems. Here is how to fix it, and yes I am being 100% serious

1. To reset your IE homepage, click TOOLS then OPTIONS, and then reset the URL in the box you see at the top

2. The reason you are getting ****loads of pop ups and tons of ads is because you are using IE. I am dead serious (and anyone here will attest to this).

3. Now that you reset your nice IE homepage, please go to www.firefox.com - go to the download sections and download the latest version of FIREFOX. Let me explain

The reason you are getting ****loads of pop ups is because people at websites you have visited have used security problems in IE to infiltrate your computer and cause it to pop up all sorts of crap. You need to use FIREFOX as your browser. FIREFOX is 99% identical to IE in every way, except it has AWESOME security. You will never get this problem again.

Although firefox will stop future problems, you need to remove all that crap the people who exploited your IE put on your computer.

Please go www.systweak.com AFTER you download firefox and install it. go to the site and download ADVANCED SYSTEM OPTIMIZER. Run it, it will clear all your problems, almost.

Then what you need to do is go to http://www.safer-networking.org/en/index.html

go to the download section and download Spy Bot - search and destroy. install and run it. this will clean up all your other problems.

Please understand i am serious. using internet explorer is the reason you are getting all these problems. There's no telling what other malicious stuff is on your computer. I will guarentee you have at least 5 viruses if you don't regularly run a virus scan.

If you have any questions about doing all this - in the order explained - just ask anyone will help you

PS: if you don't have a virus scan, go to norton.com or mcaffee.com (sp?) and download a free trial and run it - this will remove all your viruses.

You cannot use internet explorer and reasonably avoid these issues. it's inevitable do to the lack of security in IE.

Reply With Quote
  #3  
Old September 20th, 2004, 01:00 AM
teacher4u teacher4u is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Location: Alhambra CA
Posts: 165 teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 8 h 3 m 23 sec
Reputation Power: 7
Send a message via AIM to teacher4u Send a message via Yahoo to teacher4u
Hi Startup man, I appreciate your suggestion,but I don't wanna throw out the baby with the bath water. I've been using IE for quite awhile. Also Netscape Navigator. I 'm not ready to learn a complete newbrowser. I think we can find a better solution! But thank you!

Reply With Quote
  #4  
Old September 20th, 2004, 01:13 AM
StartUpMan StartUpMan is offline
Banned
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2004
Posts: 275 StartUpMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Quote:
Originally Posted by teacher4u
Hi Startup man, I appreciate your suggestion,but I don't wanna throw out the baby with the bath water. I've been using IE for quite awhile. Also Netscape Navigator. I 'm not ready to learn a complete newbrowser. I think we can find a better solution! But thank you!


You seem to have missed two major points, and your "baby with the bathwater" phrase doesn't fit the situation. Let me recap

1. FireFox is 99% identical to Internet Explorer; there is absolutely NOTHING you will need to learn to use it.

2. You will NEVER ever get rid of the problems on your computer without removing IE. You can run virus software, spyware scanners, trojan detectors...everyday for the next year but you will continue to get all these problems unless you stop using a browser which has such horrible security problems.

You may (obviously) think what I said is too drastic. I assure you it is not, and you will find everyone here will suggest to you the same thing. You need to use a browser which stops these problems. This is your only solution. I guarentee you will never solve the issue another way.

Reply With Quote
  #5  
Old September 20th, 2004, 01:45 PM
edwinbrains's Avatar
edwinbrains edwinbrains is offline
Retired Moderator
Dev Shed God 4th Plane (6500 - 6999 posts)
 
Join Date: Jan 2004
Location: London, UK
Posts: 6,670 edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)edwinbrains User rank is Second Lieutenant (5000 - 10000 Reputation Level)  Folding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced FolderFolding Points: 85411 Folding Title: Advanced Folder
Time spent in forums: 1 Week 6 Days 23 h 36 m 40 sec
Reputation Power: 92
Thread moved.
__________________
- Edwin -

The General Rules Thread | The General FAQ Thread

Reply With Quote
  #6  
Old September 20th, 2004, 03:04 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 13
Hi Jerry!

Can you post a HijackThis log. Make sure you are using ver 1.98.2

Open HijackThis, click Config > Misc Tools > Check for Update online

Or download a copy of version 1.98.2 at: http://www.majorgeeks.com/download3155.html

Post a fresh log with this new version.

Tom
__________________
HijackThis
Ad-aware
Spybot Search & Destroy
SpywareBlaster
SpywareGuard
Housecall Online A/V Scan

Please read the stickys at the top of the forum before posting!

Reply With Quote
  #7  
Old September 20th, 2004, 05:15 PM
teacher4u teacher4u is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Location: Alhambra CA
Posts: 165 teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 8 h 3 m 23 sec
Reputation Power: 7
Send a message via AIM to teacher4u Send a message via Yahoo to teacher4u
My HijackThis log For 9-20-2004

Scan saved at 3:13:20 PM, on 9/20/2004
Platform: Windows 2000 SP5 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\svchost.exe
C:\winnt\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\system32\cisvc.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\Ontrack\Fix-It\mxtask.exe
C:\winnt\System32\pctspk.exe
C:\winnt\system32\regsvc.exe
C:\winnt\system32\MSTask.exe
C:\winnt\system32\tcpsvcs.exe
C:\winnt\system32\slserv.exe
C:\winnt\System32\snmp.exe
C:\winnt\system32\stisvc.exe
C:\winnt\System32\WBEM\WinMgmt.exe
C:\winnt\Explorer.EXE
C:\winnt\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\system32\mqsvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\P2P Networking\P2P Networking.exe
C:\Program Files\QuickTime\qttask.exe
C:\winnt\crjb32.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Spyware Doctor\spydoctor.exe
C:\winnt\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\winnt\system32\wuauclt.exe
C:\WINNT\system32\cidaemon.exe
C:\WINNT\system32\cidaemon.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\unzipped\hijackthis[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\winnt\system32\efpww.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\winnt\system32\efpww.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\winnt\system32\efpww.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\winnt\system32\efpww.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\winnt\system32\efpww.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\winnt\system32\efpww.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\winnt\system32\efpww.dll/sp.html#28129
R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\user1\Application Data\Mozilla\Profiles\default\pnupqyfd.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {32B1E66F-DFA4-38E0-72A8-8EFF3F758D0E} - C:\winnt\sysmr.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [crjb32.exe] C:\winnt\crjb32.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\spydoctor.exe" /Q
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: LimeShop Preferences - file://C:\Program Files\LimeShop\System\Temp\limeshop_script0.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra button: (no name) - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\mathies.com\PopThis!\PopThis.dll
O9 - Extra 'Tools' menuitem: PopThis! Options... - {91663649-416A-42A5-8E54-B63C1ECA0548} - C:\Program Files\mathies.com\PopThis!\PopThis.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D6686F2-1D4C-405E-8D00-4C23C7F08FB4}: Domain = earthlink.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{3D6686F2-1D4C-405E-8D00-4C23C7F08FB4}: Domain = earthlink.net
O17 - HKLM\System\CS2\Services\Tcpip\..\{3D6686F2-1D4C-405E-8D00-4C23C7F08FB4}: Domain = earthlink.net


Here it is Tom,thanks a million! Jerry

Reply With Quote
  #8  
Old September 20th, 2004, 05:33 PM
StartUpMan StartUpMan is offline
Banned
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2004
Posts: 275 StartUpMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
That's not gonna help you at all. It's funny how you ask for help, but then you don't do what's gonna help you. If you clear those hijack references, you'll be good to go........for about two weeks until it happens all over again. I can't stand people who ask for help and don't take it.

Reply With Quote
  #9  
Old September 20th, 2004, 06:06 PM
teacher4u teacher4u is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Location: Alhambra CA
Posts: 165 teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 8 h 3 m 23 sec
Reputation Power: 7
Send a message via AIM to teacher4u Send a message via Yahoo to teacher4u
Dear StartUpMan, I'm sorry you're upset. I didn't post here asking for someone to love me! I posted here to get help! I respect Tom Myboy and I'm sure you(StartUpMan) honestly want to help. But it's my decision which way I wanna go! I've heard good things about the browser you recommend! I have had success in the past with the advice obtained by following the procedures suggested beginnning with HijackThis! I think what I'll do is get this problem resolved the old way and then download FIREFOX as an alternate browser and begin to experiment with it! Tom,what do you think about this other browser? Do you use it? Is it really better? Thanks. teacher4u

Reply With Quote
  #10  
Old September 20th, 2004, 07:09 PM
ChiefWigs1982's Avatar
ChiefWigs1982 ChiefWigs1982 is offline
Cunning Linguist
Dev Shed God 10th Plane (9500 - 9999 posts)
 
Join Date: Jul 2003
Location: I used to live at home, now I stay at the house
Posts: 9,894 ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)ChiefWigs1982 User rank is Lieutenant General (80000 - 90000 Reputation Level)  Folding Points: 50746 Folding Title: Beginner FolderFolding Points: 50746 Folding Title: Beginner FolderFolding Points: 50746 Folding Title: Beginner Folder
Time spent in forums: 3 Months 2 Weeks 5 Days 14 h 49 m 16 sec
Reputation Power: 820
Facebook
I completely agree with StartUp.

FireFox is hands down the best browser available. On all platforms too. There are a few threads in the Lounge Forum discussing this. Search for them, and you'll see that almost every member on this board uses FireFox, or a Mozilla browser, and for good reason. It's not just the fact that they are huge ammounts more secure than IE, but they are also completely standards compliant, which means they will display websites exactly how they should be displayed according to the w3c guidelines, unlike IE which just displays whatever it wants wherever it wants.

Do yourself a favour, and download and install firefox. It's only a 4mb file, and takes seconds to install. Once you have, you can import all your IE favourites or whatever into it, and browser safely/securely much much faster than with IE. You'll also never experience whatever it is you're going through by using IE at the min when you switch from the dark side...

My £0.02.
__________________
Support requests via PM will be ignored!
Sites: Route of Queue | Sinthetic - Alternative UK Hiphop
Read These: The General Rules Thread | The General FAQ Thread | NEW USERS - How to post a question

Sign up with Matched.co.uk and earn up to £15 per website every month!


Reply With Quote
  #11  
Old September 20th, 2004, 07:21 PM
teacher4u teacher4u is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Location: Alhambra CA
Posts: 165 teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level)teacher4u User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 8 h 3 m 23 sec
Reputation Power: 7
Send a message via AIM to teacher4u Send a message via Yahoo to teacher4u
Thank you Chiefwigs1982,I'll consult with my son who's a telecommunications engineer and see what he says.If he'sfor it,I'll probably do it!

Reply With Quote
  #12  
Old September 21st, 2004, 03:31 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 13
I agree with ChiefWigs1982 and StartUpMan. Firefox is a much more secure browser (for now, just wait for the CWS idiots to find a way to exploit it too). However, many people are not ready to make the switch. I use it everyday and suggest it to everyone.

Tom

Reply With Quote
  #13  
Old September 21st, 2004, 03:37 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 13
Jerry,

Please move or unzip HijackThis to a permanent folder such as C:\HJT\ It is important that it is in it's own folder as it will make important backups of what we will fix. Please open My Computer > double-click your C:\ drive > File > New > Folder > name it HJT and put HijackThis into that folder.

Follow these steps in the order they are presented. Please read through them carefully and do only what is suggested.

1. Download and save AboutBuster.zip

http://downloads.subratam.org/AboutBuster.zip

First unzip all files from the zip folder to a folder or your desktop. Start it and hit ok. Then hit update. A new screen should popup. On that screen hit Check for Updates. If it says it found an update hit Download Updates. If it doesn't it will automatically tell you and exit. Do not scan and delete files with AboutBuster yet. Just update it and close it.

2. Download Ad-Aware SE Personal Edition from: http://www.lavasoft.de/support/download/
Run Adaware, click the "Check for Updates now" link. Install the latest reference file. Do not scan and fix anything yet, just update it.

3. Print out these instructions so you have them handy as most of the steps need to be done in safe mode and you may not be able to go online.

4. Make sure your PC is configured to show hidden files

Open Windows Explorer & Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked. Also uncheck "H