Your system has been hijacked.
Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.
Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
O17 - HKLM\System\CCS\Services\Tcpip\..\{2DEA6FDA-024F-41B1-833E-D3E369DB2E8B}: NameServer = 85.255.114.78,85.255.112.120
O17 - HKLM\System\CCS\Services\Tcpip\..\{F5AB3BCB-87F3-452E-BD45-209DE3386BC5}: NameServer = 85.255.114.78,85.255.112.120
O17 - HKLM\System\CS3\Services\Tcpip\..\{2DEA6FDA-024F-41B1-833E-D3E369DB2E8B}: NameServer = 85.255.114.78,85.255.112.120
O17 - HKLM\System\CS4\Services\Tcpip\..\{2DEA6FDA-024F-41B1-833E-D3E369DB2E8B}: NameServer = 85.255.114.78,85.255.112.120
Click on the fix checked button.
Close HJT and reboot your computer.
Post a fresh HJT log as well as the C:\fixwareout\report.txt.
Regards Howard
This thread is for the use of mretzloff only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.