Hi and welcome to TSG,
Please download and run the following program(s):
AD-AWARE
Go here and download Ad-Aware SE.
Install the program and launch it.
First, in the main window look in the bottom right corner and click on Check for updates now then click Connect and download the latest reference files.
From the main window, click Start then under Select a scan Mode tick Perform full system scan.
Next, deselect Search for negligible risk entries.
Now to perform a scan, click the Next button.
When the scan is finished, mark everything for removal and get rid of it. To do so, right-click in the window and choose select all from the drop down menu and then click Next)
Restart your computer.
SPYBOT SEARCH & DESTROY
Go here and download Spybot Search & Destroy.
Install the program and launch it.
Before scanning press Online and Search for Updates .
Put a check mark at and install all updates.
Click Check for Problems and when the scan is finished let Spybot fix/remove all it finds marked in RED.
Restart your computer.
Then, after rebooting, please post another log and well see whats left to get rid of.
Ccleaner and Ewido
Go here to download CCleaner.
Download the trial version of Ewido Security Suite here.
Click here for info on how to boot to safe mode if you don't already know how.
Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
* Run Ewido:
Start CCleaner and click Run Cleaner
* Go to Control Panel > Internet Options. Click on the Programs tab then click the "Reset Web Settings" button. Click Apply then OK.
Restart back into Windows normally now.
Come back here and post a new HijackThis log, as well as the log from the Ewido scan.
Please download and run the following program(s):
AD-AWARE
Go here and download Ad-Aware SE.
Install the program and launch it.
First, in the main window look in the bottom right corner and click on Check for updates now then click Connect and download the latest reference files.
From the main window, click Start then under Select a scan Mode tick Perform full system scan.
Next, deselect Search for negligible risk entries.
Now to perform a scan, click the Next button.
When the scan is finished, mark everything for removal and get rid of it. To do so, right-click in the window and choose select all from the drop down menu and then click Next)
Restart your computer.
SPYBOT SEARCH & DESTROY
Go here and download Spybot Search & Destroy.
Install the program and launch it.
Before scanning press Online and Search for Updates .
Put a check mark at and install all updates.
Click Check for Problems and when the scan is finished let Spybot fix/remove all it finds marked in RED.
Restart your computer.
Then, after rebooting, please post another log and well see whats left to get rid of.
Ccleaner and Ewido
Go here to download CCleaner.
- Install CCleaner
- Launch CCleaner and look in the upper right corner and click on the "Options" button.
- Click "Advanced" and remove the check by "Only delete files in Windows temp folders older than 48 hours".
- Click OK
- Do not run CCleaner yet. You will run it later in safe mode.
Download the trial version of Ewido Security Suite here.
- Install ewido.
- During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
- Launch ewido
- It will prompt you to update click the OK button and it will go to the main screen
- On the left side of the main screen click update
- Click on Start and let it update.
- DO NOT run a scan yet. You will do that later in safe mode.
Click here for info on how to boot to safe mode if you don't already know how.
Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
Restart your computer into safe mode now. Perform the following steps in safe mode:
* Run Ewido:
- Click on scanner
- Click Complete System Scan and the scan will begin.
- During the scan it will prompt you to clean files, click OK
- When the scan is finished, look at the bottom of the screen and click the Save report button.
- Save the report to your desktop.
Start CCleaner and click Run Cleaner
* Go to Control Panel > Internet Options. Click on the Programs tab then click the "Reset Web Settings" button. Click Apply then OK.
Restart back into Windows normally now.
Come back here and post a new HijackThis log, as well as the log from the Ewido scan.