Ried

Hi HoAfCr,

I'm glad you're enjoying the forum.

Let's continue.

Once again, please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out these instructions.

**************************************

Reboot into Safe Mode

---------------------------

Run a scan in HijackThis. 'Check' the following entry:


O4 - HKLM\..\Run: [nqiwhui] c:\windows\system32\rgwuzy.exe


Click 'Fix Checked' and close HijackThis.

---------------------------

Delete the following Files

c:\windows\kwv2.dat
c:\windows\system32\rgwuzy.exe

---------------------------

Reboot into Normal Mode.

---------------------------

Run another online scan at Panda and post the results along with a new HijackThis log.