Hello and welcome to Techspot.
Boot into safe mode. See how
HERE.
Turn off system restore.(XP/ME only) See how
HERE.
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how
HERE.
Run HJT with no other programmes open, and have HJT fix the following, by placing a tick in the little box next to(if there).
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.earthlink.net/partner/more/msie/button/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://eq2.ogaming.com/db/search/quests_results.php?na=1&heritage=1
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://start.earthlink.net/AL/Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O8 - Extra context menu item: Search Using Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
Fix all 016 DPF entries.
O17 - HKLM\System\CCS\Services\Tcpip\..\{705B7E79-C87D-4DBE-A3BE-C45C11A1609B}: NameServer = 207.69.188.187 207.69.188.186
< only fix this if it doesn`t belong to your isp.
O18 - Filter: text/html - {03974811-C15F-462c-B6B0-2D2336AA57D0} - (no file)
Now click on the fix checked button.
Close HJT.
Reboot into normal mode, and turn system restore back on.
Regards Howard :wave: :wave:
