Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 129.12.3.74:7212
<Fix this entry if you didn`t set this proxy yourself or don`t know what it is.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
R3 - URLSearchHook: (no name) - {D5EF769E-ED5A-E4FC-7870-C9896D5A62E8} - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {099D0986-C204-F967-3343-00A64FA96FB9} - C:\WINDOWS\system32\vorenbj.dll (file missing)
O2 - BHO: (no name) - {755bbd1a-aa59-456c-afeb-b4c42c4dcb6f} - (no file)
O2 - BHO: (no name) - {D5EF769E-ED5A-E4FC-7870-C9896D5A62E8} - (no file)
O20 - Winlogon Notify: LMIinit - LMIinit.dll (file missing)
O20 - Winlogon Notify: winepi32 - winepi32.dll (file missing)
Click on the fix checked button.
Close HJT and reboot your system.
Post a fresh HJT log and let me know how your system is running.
Regards Howard
This thread is for the use of calsonicshifter only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.