Hi and Welcome to TSF
Please DISABLE adaware's Adwatch until this fix is complete.
Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.
Download, install, and update Ewido Security Suite
After the updates are installed, exit Ewido
Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Open add/remove programs and remove Viewpoint. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one IF they are still listed (they shouldn't be but make sure)
C:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe
Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)
O4 - HKLM\..\Run: [ViewMgr] "C:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe"
C:\Program Files (x86)\Viewpoint<--delete that folder
Run Ewido:
Reboot back to normal windows...
Please run an online scan at http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Once it has finished save the activescan log. Then post that log in your next post along with the Ewido log and the log from the following tool...
Download Silent runners.Vbs http://www.silentrunners.org/
1. Make sure you have any script blocking software disabled
2. Run the program. It will take a few minutes to complete.
3. Once complete it will produce a log named “StartupPrograms” with Your user and date in the filename. Open that txt file and posts it contents in your next post.
Please DISABLE adaware's Adwatch until this fix is complete.
Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.
Download, install, and update Ewido Security Suite
- Install ewido security suite
- Launch ewido, there should be a big E icon on your desktop, double-click it.
- The program will prompt you to update click the OK button
- The program will now go to the main screen
- On the left hand side of the main screen click update
- Click on Start
After the updates are installed, exit Ewido
Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Open add/remove programs and remove Viewpoint. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one IF they are still listed (they shouldn't be but make sure)
C:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe
Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)
O4 - HKLM\..\Run: [ViewMgr] "C:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe"
C:\Program Files (x86)\Viewpoint<--delete that folder
Run Ewido:
- Click [Scanner]
- Click [Complete System Scan] to begin scanning.
- Click [OK] when prompted to clean files
- With the first file it prompts to clean, select the option - "Perform action on all infections" - & choose clean and click [OK].
- Once finished, click the [Save report] button
- Save the report to your desktop
Reboot back to normal windows...
Please run an online scan at http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Once it has finished save the activescan log. Then post that log in your next post along with the Ewido log and the log from the following tool...
Download Silent runners.Vbs http://www.silentrunners.org/
1. Make sure you have any script blocking software disabled
2. Run the program. It will take a few minutes to complete.
3. Once complete it will produce a log named “StartupPrograms” with Your user and date in the filename. Open that txt file and posts it contents in your next post.