We need to temporarily disable Spybot search & Destroy`s tea time, as it may interfere with any fix we are trying to run.
Disable Spybot's TeaTimer. This is a two step process.
First:
- Right click Spybot in the System Tray (looks like a calendar with a padlock symbol)
- Choose
Exit Spybot S&D Resident
Second:
- Open Spybot S&D
- Click
Mode, check
Advanced Mode
- Go To Left Panel, Click
Tools, then also in left panel, click
Resident
- If your firewall raises a question, say
OK
- Uncheck the box labeled
Resident Tea-Timer and OK any prompts.
- Use
File, Exit to terminate Spybot
- Reboot your machine for the changes to take effect.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(
if there).
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} -
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} -
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} -
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} -
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} -
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} -
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} -
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} -
O16 - DPF: {D44C75D8-C827-473E-8F68-A77E42500782} -
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} -
Click on the fix checked button.
Close HJT and reboot your computer.
Delete the following folder.
C:\qoobox
Re-enable Teatimer.
Other than the above, your system is clean.
Turn off system restore.(XP/ME only) See how
HERE.
Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.
If you have any further virus/spyware problems, please post in this thread.
Regards Howard
This thread is for the use of linusb212 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.