Open HijackThis and select
Do a system scan only. place a check mark next to:
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {F467D265-1FD9-4635-AE5B-CD4749B061E4} - C:\WINDOWS\Web\sisibn.dll (file missing)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O20 - Winlogon Notify: sisibn - C:\WINDOWS\Web\sisibn.dll (file missing)
Close all windows and click
Fix checked
==========
Enable Viewing Of Hidden System Files & Folders
1. Right Click
Start.
2. Select
Control Panel.
3. Select the
Tools menu and click
Folder Options.
4. Select the
View Tab.
5. Under the Hidden files and folders heading select
Show hidden files and folders.
6.
Uncheck the Hide extensions for known file types option.
7.
Uncheck the Hide protected operating system files (recommended) option.
8. Click
Apply.
9. Click
OK.
==========
Go to
Add/Remove Programs.
Find "
My Web Search" in the list of installed programs and uninstall it.
Look for any of the following and uninstall them also.
My Web Search
My Way Speedbar
Search Assistant
Next, open
My Computer from the desktop.
Go to
C > Program Files to look for and delete these files/folders.
FunWebProducts
MyWebSearch
Restart the computer.
==========
Download Superantispyware (SAS)
SUPERAntispyware Free Edition
Install it and double-click the icon on your desktop to run it.
* It will ask if you want to
Update the program definitions, click
Yes.
* Under
Configuration and Preferences, click the
Preferences button.
* Click the
Scanning Control tab.
* Under
Scanner Options make sure the following are checked:
+ Close browsers before scanning
+ Scan for tracking cookies
+ Terminate memory threats before quarantining.
+
Please leave the others unchecked.
+ Click the
Close button to leave the control center screen.
* On the main screen, under
Scan for Harmful Software click
Scan your computer.
* On the left check
C:\Fixed Drive.
* On the right, under
Complete Scan, choose
Perform Complete Scan.
* Click
Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click
OK.
* Make sure everything in the white box has a check next to it, then click
Next.
* It will quarantine what it found and if it asks if you want to reboot, click
Yes.
* To retrieve the removal information please do the following:
+ After reboot, double-click the SUPERAntiSpyware icon on your desktop.
+ Click
Preferences. Click the
Statistics/Logs tab.
+ Under Scanner Logs, double-click
SUPERAntiSpyware Scan Log.
+ It will open in your default text editor (such as Notepad/Wordpad).
+ Save the notepad file to your desktop by clicking (in notepad) "
File" "
Save As"
* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
* Please add the log as an
attachment along with a new HijackThis log in the next post.
==========
Run HijackThis and save a new scan log
only after SAS is done scanning and cleaning.
==========
Next post please attach
SUPERAntiSpyware log
A New HijackThis log