Hi Jorg
Just leave SP2 - you’ve had it long enough and it won’t affect anything we do here. And yes, Ewido is best run in Safe Mode.
That error relates to an F-Secure file. First check your Program Files folder and make sure any folder related to F-Secure has been deleted. Then go to Start > Search and try and find the file, then delete it. Note: you may have to boot to Safe Mode to delete the file.
Clear your IE cookies. Start > Settings > Control Panel > Internet Options > General tab > under Temporary files, click on Delete Cookies
Delete the following Folders indicated in
BLUE if they still exist.
C:\Documents and Settings\Mike\Favorites\
Health
Establish an internet connection & perform an online scan with
Internet Explorer at
Kaspersky WebScanner
Next Click on
Launch Kaspersky Anti-Virus Web Scanner
You will be prompted to install an ActiveX component from Kaspersky, Click
Yes.- The program will launch and then begin downloading the latest definition files:
- Once the files have been downloaded click on NEXT
- Now click on Scan Settings
- In the scan settings make that the following are selected:
Scan using the following Anti-Virus database:Scan Options:- Scan Archives
- Scan Mail Bases
Click
OK
Now under select a target to scan: Select
My Computer- This will program will start and scan your system.
- The scan will take a while so be patient and let it run.
- Once the scan is complete it will display if your system has been infected.
Now click on the
Save as Text button:
- Save the file to your desktop.
- Copy and paste that information in your next post.
Take note of the name(s) and location(s) of any file(s) it detects but fails to clean.
* Turn off the real time scanner of any existing antivirus program while performing the online scan
Please post back with the Kaspersky Log and a fresh HijackThis Log.