Hello and welcome to TSF
Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
Go to
My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the
Hide protected operating system files option.
Please do NOT change any of those settings until we finish the fixing process.
Right click on this link
http://www.greyknight17.com/spy/DelO15Domains.inf and choose Save As. Save it to your desktop. Right click on that file and choose Install. You may delete it afterwards.
Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).
Open Hijack This and click on Scan. Check the following entries
(make sure you do not miss any)
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = http://localhost;
O4 - HKLM\..\Run: [jsk] C:\WINDOWS\System32\jsk.exe
O4 - HKCU\..\Run: [diskcopy] C:\WINDOWS\System32\diskcopy.exe
O15 - Trusted Zone: http://www.neededware.com
Please remember to close all other windows, including browsers then click Fix checked.
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
C:\WINDOWS\System32\jsk.exe
C:\WINDOWS\System32\diskcopy.exe
Reboot your system in Normal Mode.
If you have a fast internet connection (Broadband), run an online scan at
Trend Micro or
RAV Antivirus.
Please select the “autoclean” option when using Trend Micro.
Please post a fresh Hijack This log so that we can check if your system is clean.