MSU ROX
put
HijackThis in e.g
C:\Program Files\HJT and
NOT on the Desktop!
follow this:
https://www.techspot.com/vb/topic33967.html
Fix these while you are at it:
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [strtas] lockx.exe
O4 - HKLM\..\RunServices: [strtas] lockx.exe
O4 - HKCU\..\Run: [strtas] lockx.exe
O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
fix all O16 - DPF: entries
You know these IPs? If not, FIX.
O17 - HKLM\System\CCS\Services\Tcpip\..\{75319614-B5FE-49F6-B66A-7A0E50C27330}: NameServer = 68.60.32.6,68.60.32.5
Then show me that
xy.bat