First
Read: Only use these HJT-instructions when asked!
/P/ Process needs to be stopped
/U/ UNinstall anything to do with this
/R/ unRegister the xxx.DLL in that line
Transfer the text from between these dotted lines underneath to between the dotted lines of that post.
Make sure to follow
ALL instructions
in SEQUENCE, and in HiJackThis tick/fix
ALL lines indicated here!
...................................................................................................
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
/R/U/ O2 - BHO: XBTP07618 - {2296428D-C133-4928-B76A-A200FF409572} - C:\PROGRA~1\
FREEPR~1\freeprod.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
/P/U/ O4 - HKLM\..\Run: [MsUpdate] C:\Program Files\
MsUpdate\MsUpdate.exe /auto
/P/ O4 - Startup:
PowerReg Scheduler.exe
O8 - Extra context menu item: CR: &Import Data - C:\WINDOWS\web\
CR-ImportData.html
/U/ O8 - Extra context menu item: Download all by Net Transport - C:\Program Files\
Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
Unless these IP-numbers are from your ISP, fix this O17
O17 - HKLM\System\CCS\Services\Tcpip\..\{C74F3DF8-5193-40EB-AFBE-670DB08CC0EF}: NameServer = 67.18.100.114,198.41.0.4
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: rndunkwn - rndunkwn.dll (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
...................................................................................................
And just in case, do not (re)install Limewire or any similar P2P crap!
Next time you're on your own!