Hi singingsuede
Welcome to TSG!
First please do this:
Navigate to the C:\Program Files\Internet Explorer folder and locate the swqtka.exe file. Right click it and choose "Send to compressed (zipped) folder". The zipped folder will appear there in the Program Files folder. Do the same with the The C:\WINDOWS\sxchost.exe file. Attach copies of those zipped folders and send them to me here. Please include a link to this thread so I'll remember where they came from.
These files may be hidden so click on My Computer. Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files" and "Hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"
Run Hijack This again and put a check by these. Close all windows except HijackThis and click "Fix checked"
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [Dial32] C:\WINDOWS\dl.exe
O4 - HKLM\..\Run: [Dial33] C:\WINDOWS\dlm.exe
O4 - HKLM\..\Run: [Upgrade Service] C:\WINDOWS\sxchost.exe
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\swqtka.exe
Restart to safe mode and delete:
The C:\Program Files\Internet Explorer\swqtka.exe file
The C:\WINDOWS\dl.exe file
The C:\WINDOWS\dlm.exe
The C:\WINDOWS\sxchost.exe file
How to start your computer in safe mode
Welcome to TSG!
First please do this:
Navigate to the C:\Program Files\Internet Explorer folder and locate the swqtka.exe file. Right click it and choose "Send to compressed (zipped) folder". The zipped folder will appear there in the Program Files folder. Do the same with the The C:\WINDOWS\sxchost.exe file. Attach copies of those zipped folders and send them to me here. Please include a link to this thread so I'll remember where they came from.
These files may be hidden so click on My Computer. Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files" and "Hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"
Run Hijack This again and put a check by these. Close all windows except HijackThis and click "Fix checked"
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [Dial32] C:\WINDOWS\dl.exe
O4 - HKLM\..\Run: [Dial33] C:\WINDOWS\dlm.exe
O4 - HKLM\..\Run: [Upgrade Service] C:\WINDOWS\sxchost.exe
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\swqtka.exe
Restart to safe mode and delete:
The C:\Program Files\Internet Explorer\swqtka.exe file
The C:\WINDOWS\dl.exe file
The C:\WINDOWS\dlm.exe
The C:\WINDOWS\sxchost.exe file
How to start your computer in safe mode