tinag

Hi there --

Before proceeding, please print this page or copy it to Notepad to help you carry out the instructions. If you have questions about any instruction, please ask before performing it.

If you can't download a required program by simply clicking its link, please try right-clicking that link instead. Then click Save (Target) As.. and save the file to your computer.

Now, the fix..

Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.

To get rid of lingering installation files, you should empty your Temp folders. (You should do this periodically anyway; even benign software leaves a lot of junk there.) Download and install CleanUp! (alternate link), then run it and click the CleanUp! button. When it asks whether you want to log off, click Yes.

Reboot your system into Safe Mode by repeatedly tapping the F8 key until the menu appears, then selecting Safe Mode.

Open Hijack This and click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any):

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKCU\..\Run: [mfcctr] C:\WINDOWS\system32\mfcctr.exe

Please close all other windows, including browsers, then click Fix checked.

If it still exists, delete the file indicated in RED:
C:\WINDOWS\system32\mfcctr.exe

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click Yes.

Reboot your system into normal mode.

Since you've already run one online virus scan, let's skip that for now and see where we've gotten.

So in your next post, we need to see a fresh HijackThis log. If you're still experiencing problems, please describe them in a little more detail so we can decide on a next step.