Hi,
Step 1
Disable Spybot Teatimer v1.6
- Right click the Spybot Icon in the system tray near the clock (looks like a blue/white calendar with a padlock symbol).
- Click once on Resident Protection, then right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
- Go to Start > All Programs > Spybot - Search & Destroy > Spybot Search & Destroy.
- Click on Mode > Advanced Mode. When it prompts you, click Yes.
- On the left hand side, click on Tools.
- Check (tick) this box if it is not yet ticked: Resident.
- You will notice that Resident is now added under Tools. Click on Resident.
- Uncheck (untick) this box: Resident "TeaTimer" (Protection of over-all system settings) active.
- Exit Spybot Search & Destroy.
- Restart your computer for the changes to take effect.
Step 2
Open HijackThis, press Do a system scan only, checkmark following entries:
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {3B7AAEB1-9F3D-4491-9C06-C7165CA8D058} - C:\Program Files\Applications\iebt.dll (file missing)
O4 - HKCU\..\RunOnce: [SpybotDeletingD2326] cmd /c del "C:\Program Files\Applications\iebu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB4801] command /c del "C:\Program Files\Applications\iebtmm.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD923] cmd /c del "C:\Program Files\Applications\iebtmm.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB7646] command /c del "C:\Program Files\Applications\iebtu.exe"
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
Close all other windows including browser and press Fix checked.
Step 3
Download OTMoveIt3 by Old Timer and save it to your Desktop.
- Double-click OTMoveIt3.exe to run it.
- Copy the lines in the codebox below.
Code:
:Files
C:\Program Files\Applications
C:\Program Files\ShoppingReport
C:\WINDOWS\system32\675873
- Return to OTMoveIt3, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
- Click the red Moveit! button.
- Copy everything in the Results window (under the green bar), and paste it in your next reply.
- Close OTMoveIt3
Step 4
Please post a fresh HijackThis log and OTMoveIt3 log.
