Clear your IE cookies. Start>Settings>Control Panel>Internet Options>General tab>under Temporary files, click on Delete Cookies
Please download these additional files/programs. Do not run them unless instructed to do so.
Download
CWShredder and run it. Click on Update. Click on 'I Agree' button if you agree. Click on 'Fix' (it will automatically fix anything it finds for you) and then click OK. If it asks if you want to delete a certain random file, choose No and post that filename here. Let it finish the scan and then hit Next and Exit.
smitRem.exe and save the file to your desktop.
Double click on the file to extract it to it's own folder on the desktop.
*Note* Alternate download sites for smitrem... http://www.downloads.subratam.org/smitRem.exe
http://www.bleepingcomputer.com/file...ar/smitRem.exe
DelDomains.inf
Right-click and select
Save Target As - save it to your desktop.
To use: Right-click and select....... Install (no need to restart)
**Note** This will remove all entries in the
"Trusted Zone"
I see you have Adaware already. Check for any updates. Also make sure to customize the settings in Ad-aware at
http://www.greyknight17.com/spyware.htm#adaware for better scan results. One updated, and custom settings in place, Close Adaware.
'UNPLUG'/DISCONNECT YOUR COMPUTER FROM THE INTERNET WHEN YOU HAVE FINISHED DOWNLOADING
This webpage would not be available when you're carrying out the fix. Please save the following instructions in Notepad. I have customized my instructions on the assumption that you are using Notepad. It may lead to some confusion should you choose to do otherwise.
If there's anything that you don't understand, kindly ask your questions before proceeding with the fixes. There should not be any opened browsers when you are carrying out the procedures below.
IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Run
Cleanup! using the following configuration:
1. Click Options...
2. Set the slider to
Standard CleanUp!
3.
Uncheck the following:
- Delete Newsgroup cache
- Delete Newsgroup Subscriptions
- Scan local drives for temporary files
4. Click OK
5. Press the CleanUp! button to start the program. Reboot/logoff when prompted.
* CleanUp! will not create any backups!!
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Next, reboot your computer in
SafeMode :
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear
- Select the first option, to run Windows in Safe Mode.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Open the
smitRem folder, then double click the
RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.
The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Open
Ad-aware and do a full scan. Remove all it finds.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Go to My Computer->Tools->Folder Options->View tab:
* Under the Hidden files and folders heading, select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Also make sure there is no checkmark beside Hide file extensions for known file types
* Click Yes to confirm and then click OK.
Delete the following
Files/
Folders if they exist:
C:\WINDOWS\uniq
Next go to
Control Panel click Display>Desktop>Customize Desktop>Website>Uncheck and delete if present:
- "Security Info"
- "Warning Message"
- "Security Desktop"
- "Warning Homepage"
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
REBOOT TO NORMAL MODE
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Run a new scan with HJT, save the log and post it here.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
smitrem has a desktop registry repair built in. If that helps, the next step will not be needed....
Capture a screen shot of your desktop and post it here. If you need instructions....Ctrl + Print Screen, then paste it into Paint, save as jpg, and upload as an attachment
In your next post, please provide results from:
- HiJackThis log
- Smitfiles.txt