Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
R3 - URLSearchHook: (no name) - {403FD7D8-6260-51CD-44F7-1DD4C9CFAFEC} - (no file)
O2 - BHO: (no name) - {403FD7D8-6260-51CD-44F7-1DD4C9CFAFEC} - (no file)
O2 - BHO: (no name) - {51EC5381-B76A-F8E1-3403-993C6428E0B1} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -
http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O20 - AppInit_DLLs: ?i??
Click on the fix checked button.
Close HJT.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Turn off system restore.(XP/ME only) See how here.>
http://www.bleepingcomputer.com/forums/tutorial56.html
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.>
http://www.bleepingcomputer.com/forums/tutorial61.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.>
http://www.bleepingcomputer.com/forums/tutorial62.html
Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.
Click on the processes tab and end process for(if there).
DinerDashSetup-dm[1].exe
Close task manager.
Locate and delete the following
bold files and/or directories(if there).
C:\Downloads\
DinerDashSetup-dm[1].exe
Reboot into normal mode, check to make sure the above file has been deleted.
Turn system restore back on and rehide your protected OS files.
Post a fresh HJT log and let me know if you`re still having any problems.
Regards Howard
This thread is for the use of Jimborang only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.