tetonbob

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

Before begining the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Even though you've run FixWareout already, I'd like to see it run again. Please delete the version you have, and do this:

Please download & Install - FixWareout.exe

When you reach the final page of the installation process, make sure "Run fixit" is checked.
Follow the on-screen prompts & reboot your computer when instructed to do so.

**Do not be alarmed if your computer takes longer than usual to load.

FixWareOut will produce a logfile, report.txt located within the C:\fixwareout folder

--------------------------------------------------------------------------

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' if they still exist (make sure not to miss any):

O17 - HKLM\System\CCS\Services\Tcpip\..\{152C8A1C-D11A-420B-BBB1-B19E6683280C}: NameServer = 85.255.114.21,85.255.112.190
O17 - HKLM\System\CCS\Services\Tcpip\..\{82BEDD44-BA44-490B-8581-1044E2817A44}: NameServer = 85.255.114.21,85.255.112.190
O17 - HKLM\System\CS1\Services\Tcpip\..\{152C8A1C-D11A-420B-BBB1-B19E6683280C}: NameServer = 85.255.114.21,85.255.112.190
O21 - SSODL: SysTray.Exgr - {5368D1FC-4F5C-4f1b-B134-E67214FC78E9} - C:\WINDOWS\system32\gdjidokk.dll (file missing)

---------------------------------------------------------------------------------------------

Delete this file if present (don't worry if you can't find it):

C:\WINDOWS\system32\gdjidokk.dll

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.

• The program will then begin downloading the latest definition files.
• Once the files have been downloaded click on NEXT
• Locate the Scan Settings button & configure to:
  • Scan using the following Anti-Virus database:
    • Extended
  • Scan Options:
    • Scan Archives
    • Scan Mail Bases
• Click OK & have it scan My Computer
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan

---------------------------------------------------

Run a new HijackThis scan. Save the log file and post it here.

---------------------------------------------------------------------------------------------

Please return with results from:

Wareout - C:\fixwareout\report.txt
Online scan
HJT