Ried

Hi Raggedy,

Download BootSafe and save it to your Desktop.

• Double click the BootSafe icon to start the program.
• Select "Safe Mode - Minimal".
• Click the Reboot button
• When you have completed your tasks, simply run BootSafe again and select the Normal Restart option and click the Reboot button and your computer will reboot in Normal Mode.

------------------------

Run a scan in HijackThis. 'Check' the following:

O4 - HKLM\..\Run: [Jawa322] C:\WINDOWS\jawa32.exe

------------------------

Delete the following file:

C:\WINDOWS\jawa32.exe

------------------------

Reboot back into Normal Mode. Let's try another online scanner:

Please perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.

• The program will then begin downloading the latest definition files.
• Once the files have been downloaded click on NEXT
• Locate the Scan Settings button & configure to:
  • Scan using the following Anti-Virus database:
    • Extended
  • Scan Options:
    • Scan Archives
    • Scan Mail Bases
• Click OK & have it scan My Computer
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Click the Save as Text button to save the file to your desktop so that you may post it in your next reply along with a new HijackThis log.

* Turn off the real time scanner of any existing antivirus program while performing the online scan


Click 'Fix Checked' and close HijackThis.