A little more cleaning.
Please print out or copy this page to Notepad. You should
not have any open browsers when you are following the procedures
below.
Reboot into Safe Mode (hit F8 key until menu shows up).
Make sure to close any open browsers. Check and fix the following in HijackThis if they still exist (make sure not to miss any):
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.opdazxymebg.biz/4Ff7FV3X...IzJiY5jyJrg.jpg
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.pdnivgtretjyouyxtmj.biz/...zqDqkoZLGJ0.cgi
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.vxjbmifddmywjqlrozb.biz/4Ff7FV3XluGL97Fb3X_bXUYRx0zpW8xbIzJiY5jyJrg.htm"); (C:\Documents and Settings\Nfredible\Application Data\Mozilla\Profiles\default\j28huu8k.slt\prefs.j s)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csea rchplugins%5CSBWeb_02.src"); (C:\Documents and Settings\Nfredible\Application Data\Mozilla\Profiles\default\j28huu8k.slt\prefs.j s)
O4 - HKLM\..\Run: [inter settings live for] C:\Documents and Settings\All Users\Application Data\Name debug inter settings\Programinfo.exe
Delete the following Files/Folders (delete folders if no filename is specified) according to their directory (if none, just do a search for them)
and delete them if they exist:
C:\Documents and Settings\All Users\Application Data\Name debug inter settings\
Reboot into Normal Mode and post a new HijackThis log file so we can make sure it's clean.
To help prevent future spyware installations/infections, please read the
anti-spyware section and use the tools provided.