Hello and welcome to the forum. I would prefer you copy/paste your log, I personally do not open attachments. There is a little yet to remove including a nasty piece of adware called
netster. Let's clean a little while we do it.
You HJT is running from a TIF and backups for safety would be deleted when you clean TIF files, I prefer you move it here:
C:\HJT\HijackThis.exe. Here are additional instructions if you need them:
http://russelltexas.com/malware/createhjtfolder.htm
http://www.bleepingcomputer.com/forums/tutorial94.html
Please download ATF Cleaner by Atribune
http://www.atribune.org/public-beta/ATF-Cleaner.exe
Save it to your
Desktop. We will use this later.
(
Windows Defender and/or TeaTimer may block the fix and may need to be tuned off until you are done)
Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
http://207.188.7.150/0603dec34f6b5ad46f06/netzip/RdxIE601.cab
netster
Close all programs but HJT and all browser windows, then click on "Fix Checked"
Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.
Post a last
HJT log and let me know how you are running.
Thanks...pskelley
Safer Networking Forums
