Omerr

Hello again. Feel well!
Ok, your logs are much better.

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

Please disable SpywareDoctor by doing the following:

• From within Spyware Doctor, click the "OnGuard" button on the left side.
• Uncheck "Activate OnGuard".

It is true that this tool is important to your protection, but it also won't let us fix your PC now. After we are done and your computer is clean, you may enable it.

Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).
Make sure you log into Safe Mode under your usual account, the one you use in Normal Mode!

Open Hijack This and click on Scan. Check the following entries (make sure you do not miss any)

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZCxdm238YYUS
O4 - HKLM\..\Run: [Windows Workstation Service] explore.exe
O4 - HKLM\..\RunServices: [Windows Workstation Service] explore.exe
O4 - HKCU\..\Run: [Windows Workstation Service] explore.exe
O4 - HKCU\..\RunServices: [Windows Workstation Service] explore.exe


Please remember to close all other windows, including browsers then click Fix checked.

Please go Start->Run and type regsvr32 /u occache.dll. Click Enter.

Delete the following Files indicated in RED if they still exist:

C:\WINDOWS\system32\PreUninstallHL.exe
c:\windows\downloaded program files\f3initialsetup1.0.0.15.inf
explore.exe - Please search for this filename. Delete only the file that is spelled explore.exe, not anything else!


Please download the attached regfix.zip file and save it to your desktop. Extract the regfix.reg file and double-click on it. Click Yes to merge the file with the registry.

Please go to FireFox. Then, go to Tools->Options. Then, click the Privacy button, and under Cookies click the Clear button.
Please make sure you remember your passwords on all sites over the internet, since they won't be automatically remembered until the next time you input them.

Updating Java and Clearing Cache

1. Go to Start > Control Panel double-click on the Java Icon (coffee cup) in the Control Panel.
2. It will say "Java Plug-in" under the icon.
3. If it is not visible, click on 'Switch to Classic View' in the left pane of the Control Panel or 'Other Control Panel Options'
4. Please find the Update button or tab in the Java Control Panel. Update your Java then reboot.
5. If you are unable to update you can manually update by going here:
   • http://www.java.com/en/download/manual.jsp
6. After the reboot, go back into the Control Panel and double-click the Java Icon.
7. Under the Advanced Tab, click <Applet> tag support and select the browser(s) you are using.
8. Under "Temporary Internet Files", click the Delete Files button.
9. There are three options in the window to clear the cache - Leave ALL 3 Checked
   • Downloaded Applets
   • Downloaded Applications
   • Other Files
10. Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
11. Click OK to leave the Java Control Panel.

Reboot your system in Normal Mode.

Perform an online scan with Internet Explorer with Panda ActiveScan
** click on "Free use ActiveScan" located on the top right hand corner

1. Click Scan your PC & a 'pop up' window shall appear. *ensure that your pop up blocker doesn't block it
2. Click Scan Now
3. Enter your e-mail address & click Scan Now ...begins downloading 8 MB Panda's ActiveX controls

Begin the scan by selecting My Computer

• If it finds any malware, it will offer you a report.
• Click on see report. Then click Save report

Please post that log in your next reply.

Now give us a new HijackThis log, along with Panda ActiveScan’s log, so we can make sure your system is clean.

Attached Files

regfix.zip (237 Bytes, 2 views)