Do a HijackThis scan & place a check next to these items and select "Fix checked":
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O4 - HKCU\..\Run: [XP restart system] h
---------------
Open
notepad and copy/paste the text in the quotebox below into it:
Code:
File::
C:\WINDOWS\Downloaded Program Files\launcher.ocx
C:\WINDOWS\system32\1Q8V33d2.dll
C:\WINDOWS\system32\drivers\runtime2.sy_
C:\WINDOWS\system32\install.exe
Folder::
C:\Documents and Settings\ESTHER1\Desktop\backups
Save this as
ComboFix-Do.txt
Refering to the picture above, drag ComboFix-Do.txt into ComboFix.exe
Then post the resultant log
---------------
In your next post, please include fresh logs from:
- Fresh Hijackthis log taken just before replying
- ComboFix's log
__________________
Question - what have you done for the community today?