Ok we have some work to do. So make sure to follow all of this in order. I am going to have to see a startup list before we can completely remove this. Then I can give you a batch file to run, delete some folders and do some fixes with hjt. After that you should be all set.
----------------------------------------------------------
Update your Java Runtime Environment
- Click the following link
Java Runtime Environment 6 Update 6
- The 5th option down is the one you want (click Download)
- Check the box to agree to terms of service
- Check the box for your operating system and click 'Download selected'at the bottom
- After the install Go to Start-> Control Panel-> add/remove programs (Programs and features), and uninstall:
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) SE Runtime Environment 6 Update 1
Messenger Plus! Live & Sponsor (CiD)
I also recommend uninstalling LimeWire 4.16.6
- Navigate to C:\programfiles\Java -> delete any subfolders except the jre1.6.0_06 folder
-------------------------------------------------------------------------------
Generate Startup List
Run HJT and click on Open the Misc Tools section.
* In the next window, under StartupList (integrated: v1.52), check the two boxes to the left of:
o "List also minor sections (full)"
o "List empty sections (complete)".
* Click on Generate StartupList log and OK in the confirmation window.
* When the scan has completed a Notepad window entitled "startuplist.txt" will open.
* When you close it, it will be saved into the HJT folder. Please post this into your next reply.
-------------------------------------------------------------------------------
Please go
HERE to run Panda's ActiveScan
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on My Computer to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report
In your next reply attach:
1) startup list
2) results from activescan
3) a fresh hijackthis log