You may want to print this or at least copy and paste it into notepad then save to your desktop to have access while in safe mode.
SpyClean is a rogue trojan/adware program that masquerades as legitimate anti-spyware/registry cleaner software package
Show hidden files through windows explorer
- Access Windows Explorer by clicking Start, point to All Programs, Accesories, and then click Windows Explorer. Or hold the windows key and press E
- On the Tools menu in Windows Explorer, click Folder Options
- Click the View tab.
- Under Hidden files and folders, click Show hidden files and folders
- Remove the checkmark from the checkbox labeled Hide protected operating system files
- Remove the checkmark from the checkbox labeled Hide file extensions for known file types
- Put a checkmark in the checkbox labeled Display the contents of system folders.
-------------------------------------------------------------------------
Download\install 'SuperAntiSpyware Home Edition Free Version' from
HERE
- Launch SuperAntiSpyware and click on 'Check for updates'.
- Once the updates have been installed,exit SuperAntiSpyware.
------------------------------------------------------------------------------
Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.
O4 - HKCU\..\Run: [blahbarb] C:\DOCUME~1\HP_ADM~1\APPLIC~1\CORNOP~1\Multi Eq Exit.exe
O4 - HKCU\..\Run: [SpyClean] C:\Program Files\Netcom3 Cleaner\SpyClean.exe
Now
close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.
Please go to Start > Control Panel >
Add/Remove Programs and remove the following (if present):
Netcom3 Cleaner
SpyClean
Please note any other programs that you don't recognize in that list in your next response.
Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these
folders (if present):
C:\Program Files\Netcom3 Cleaner
C:\Documents and Settings\HP_ADM~1\Application Data\CORNOP~1<-folder will start with this
---------------------------------------------------------------------------
Scan with SuperAntiSpyware
- Start SuperAntiSpyware.
- On the main screen click on 'Scan your computer'.
- Check: 'Perform Complete Scan then Click 'Next' to start the scan.
- Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
- Make sure everything found has a checkmark next to it,then press 'Next'.
- Click on 'Finish' when you've done.
It's possible that the program will ask you to reboot in order to delete some files.
Obtain the SuperAntiSpyware log as follows:
Click on 'Preferences'.
Click on the 'Statistics/Logs' tab.
Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
It will then open in your default text editor,such as Notepad.
Attach the notepad file here on your next reply
------------------------------------------------------------------------------
You aren't running Firewall Software. Please download and install one of these first!
Use a Firewall - It is very important that you use a Firewall on your computer. If you use the Windows Firewall you might think that's enough but it only controls inbound traffic. Simply using a Firewall in its default configuration can lower your risk greatly. Here are some firewalls which are free for personal use and most commonly used:
Comodo (Vista Compatible)
Kerio
Online Armor
Zonealarm (Vista Compatible)
------------------------------------------------------------------------
Please attach the superantispyware log, and run a fresh Hijackthis log to attach as well.