Your system has been hijacked.
Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.
If after reading the above, you wish to clean your system, do the following.
Download and run the
Blacklight programme. Follow all the instructions carefully.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309} (Automatic Driver Installation Control) -
http://inst.c-wss.com/n024p/EN/install/gtdownlr.cab
O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB34} (Sony SNC-RZ30 Image Viewer) -
http://webcam2.ci.schaumburg.il.us/home/SonySncRz30View.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} -
http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations /symbizpr/xcontrol/SymDlBrg.cab
Fix all 017 entries.
Fix all 018 Protocol: entries.
Click on the fix checked button.
Close HJT and reboot your system.
Post a fresh HJT log and let me know the results of the Blacklight scan.
Regards Howard
This thread is for the use of kep890 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.