Frostie_9:
Please locate the following files. You may not have them all and they may be named slighty different then what I posted. Locate the ones you have and post their directorys..
C:\windows\system32\cidft.dll
C:\windows\system32\cidpog32.dll
C:\windows\system32\gupd.dll
C:\windows\system32\hst32.dll
C:\WINDOWS\System32\cidpoq32.dll
C:\WINDOWS\System32\nthst32.dll
C:\windows\system32\icnfe.dll
C:\windows\system32\icqrt.dll
C:\windows\system32\icvbr.dll
C:\windows\system32\sdfup.dll
C:\windows\system32\wcnl32.dll
C:\windows\system32\wecxg32.dll
C:\windows\system32\wirl.dll
C:\windows\system32\xcwer32.dll
C:\windows\system32\zxmsn.dll
C:\windows\system32\thun.dll
C:\WINDOWS\System32\thun32.dll
C:\windows\system32\rch32.dll
C:\Program Files\asd.hta
C:\windows\system32\w32tm.exe
C:\windows\system32\103a.exe
1.exe
pps.exe
103a.exe
I also need a log from the following tool...
Download FindIt's.zip to your desktop:
http://forums.net-integration.net/in...post&id=142443
1. Unzip/extract the files inside to a folder on your desktop.
2. Open the folder and run FindIt's.bat and wait for notepad to open a text file. It will take awhile so please be patient ...
3. Then post the results here please, along with the new HijackThis log.