Hi and Welcome to TSF
Before attacking an adware/spyware problem with hijackthis make sure you have already run ad-aware SE with VX2 add-on cleaner, Spybot Search & Destroy (with updated database) and CWShredder as these programs will clean a lot of the crap out first. All links to programs are in my signature. Ok..on to the log…..
Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also. Please make sure system restore is
enabled by right clicking on My Computer and go to Properties->System Restore and check the box for Turn OFF System Restore and make sure it’s
NOT checked. We want system restore
ON and monitoring your current hard drive. Once your clean we will turn this off and then create a new restore point.
Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn't be but make sure)
C:\WINDOWS\system\winmouse.exe
Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)
O4 - HKLM\..\Run: [winmouse] c:\WINDOWS\system\winmouse.exe
c:\WINDOWS\system\
winmouse.exe <--delete that file.
Reboot back to normal windows.
Run an online scan from
http://www.pandasoftware.com/actives..._principal.htm
Select the "Autofix/Clean" option and save the activescan log. Post both the Panda scan log and another hijackthis log.