Please print out or copy this page to
Notepad in order to assist you when carrying out the following instructions.
Please reboot your computer in SafeMode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear
- Select the first option, to run Windows in Safe Mode.
HijackThis!
Open Hijack This and click on Scan. Check the following entries
(make sure you do not miss any)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,setup32. exe
O4 - HKLM\..\Run: [Windows CODE Fix HOTPATCH] tiwqbnxrfza.exe
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
O20 - Winlogon Notify: SensSrv - senssrv.dll (file missing)
Please remember to close all other windows, including browsers then click Fix checked.
File and Folder Deletions
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
tiwqbnxrfza.exe<<<Find via Start>Search
senssrv.dll<<<Find via Start>Search
C:\Program Files\Common Files\Microsoft Shared\Web Folders\
ibm00001.exe
C:\Program Files\Common Files\Microsoft Shared\Web Folders\
ibm00002.exe
Reboot your system in Normal Mode.
Post a new Hijackthis log and let me know how the system is performing now please.