Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below. Also if you have any programs that may prevent system changes (like Spybot's TeaTimer program, Ad-aware's Ad-Watch, and others), make sure you disable them before doing any of the fixes (or accept the changes for the fix we give you when asked by the programs).
Go to My Computer->Tools (or View)->Folder Options->View tab:
* Under the Hidden files and folders heading, select Show hidden files and folders (it's Show all files for Windows 98).
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm and then click OK.
For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).
Download ewido security suite from here…
http://www.ewido.net/en/download/
Update it's database from here..
http://www.ewido.net/en/download/updates/
Run a scan and let it clean the PC.
Save the log and post it here. Along with a new Hijack this log.
IMPORTANT!:
Before we can proceed any further, please visit the
Microsoft's Windows Update Page and install
ALL Critical Updates for your system
(except service pack 2) (SP2).
SP2 should
only be installed on a fully disinfected system. At the minimum install at least
SP1a for both
XP and
IE6. Without these updates your system is wide open to re-infection and we are both wasting our efforts to clean your system. After we have completed your clean-up, we will have you return to the
Windows Update page and install
SP2. We will also then advise you on how to better protect yourself online.
Please apply those updates
BEFORE posting your next log. It is this forum's policy to stop the disinfection process until these basic updates are done. If during the updating process you get a message that your product key is invalid ....then you may not have a legitimate copy of Windows XP. Unfortunately it's also this forums policy that we only address users with a legal copy of Windows XP.... therefore if you can not update
Windows XP to
SP1 we must stop the cleansing process here.
**Note** If your having trouble locating the service pack SP1a here is a direct link to download it from..
http://download.microsoft.com/downlo...p1a_en_x86.exe
Thank you for your cooperation.