Hi winter,
Yep, it is looking good. Well done!
OK, let’s clean up your system a bit more.
We need to disable your Windows Defender real-time protection as it may interfere with the fixes that we need to make.
To disable
Windows Defender:
- Open Windows Defender.
- Click on Tools, General Settings.
- Scroll down and uncheck Turn on real-time protection (recommended).
- After you uncheck this, click on the Save button and close Windows Defender.
NEXT:
Please run
HijackThis and click "
Scan". Place a check (tick) next to the following entries (if present):
O1 - Hosts: 65.54.239.80 messenger.hotmail.com
O1 - Hosts: 65.54.239.80 dp.msnmessenger.akadns.net
Close
ALL programs and browsers (including this one), leaving
ONLY HijackThis open, then click "
Fix checked".
Then please exit HijackThis.
NEXT:
Let's run an online scan to make sure we're not leaving anything behind.
Please do an online scan with
Kaspersky Online Scanner- Click on Kaspersky Online Scanner.
- You will be prompted to install an ActiveX component from Kaspersky, click Yes.
- The program will launch and then begin downloading the latest definition files.
- Once the files have been downloaded click on Next.
- Now click on Scan Settings.
- In the scan settings make sure that the following are selected:
- Scan using the following Anti-Virus database:
Extended
- Scan Options:
Scan Archives
Scan Mail Bases
- Click OK.
- Now under select a target to scan:
- This program will start and scan your system.
- The scan will take a while so be patient and let it run.
- Once the scan is complete it will display if your system has been infected.
- Now click on the Save Report As button.
- In the File name: field, type kavscan.
- In the Save as type: field, select Text file (*.txt).
- Save the file to your desktop.
- Copy and paste that information in your next post.
NEXT:
Please
reboot your computer normally into Windows, and then please post the
log from the Kaspersky scan and a new
HijackThis log.
How are things running now?