Please post Ewido's report. It's an intergral part of the fix. I hope you have conducted the fix in the correct order/sequence.
For the meanwhile, please do the following ...
* * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * *
Right click on this & choose "Save As..." DelO15Domains.inf -
DelO15Domains.inf
Right click on
DelO15Domains.inf and choose Install. It will run immediately (you won't be able to see anything happen). You may delete the file afterwards.
Host.zip - From within Host.zip, double click on
MVPS.bat & allow it to run.
Right click on this & select 'Save As' -
DNSManual.bat
Doubleclick on
DNSManual.bat & allow it to run.
SpywareBlaster 3.5.1
Install & update SpywareBlaster with the latest definitions.
After you have updated, click the button -
enable protection for all unprotected items
IE-SpyAD - Extract the contents to a new folder
From within the folder, double-click
install.bat
Select Option #2 -
Install the new IE-SPYAD list.
Then return to the main menu.
Select option #4 -
Add the old porn sites domain
missingfilesetup.exe. Then try Killbox again.[/size]
* * * * * * FIXING ENTRIES WITH HIJACKTHIS * * * * * * * * * *
Do a HijackThis scan & place a check next to these items and select "Fix checked":
O4 - HKLM\..\Run: [dmgpx.exe] C:\WINDOWS\system32\dmgpx.exe
* * * * * * DELETING FILES/FOLDERS * * * * * * * * * * * * * * *
Locate and delete the following files/folders:
- C:\WINDOWS\SYSTEM32\CSEMP.EXE
C:\WINDOWS\SYSTEM32\DMZZO.EXE
C:\WINDOWS\System32\PZXZY.DLL
C:\WINDOWS\system32\dmgpx.exe
Run CleanUp! again & reboot before posting a new HJT log
__________________
Question - what have you done for the community today?