Boot into safe mode. See how HERE.
http://www.bleepingcomputer.com/forums/tutorial61.html
Turn off system restore.(XP/ME only) See how HERE.
http://www.bleepingcomputer.com/forums/tutorial56.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.
http://www.bleepingcomputer.com/forums/tutorial62.html
Go to add remove programmes in your control panel and uninstall anything to do with(if there).
winupdates
Close control panel.
Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.
Click on the processes tab and end process for(if there).
winupdates.exe
mt.exe
mx.exe
ms.exe
Close task manager.
Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).
O2 - BHO: (no name) - {348FE907-249E-4C65-A838-F34A193FE1D1} - (no file)
O4 - HKLM\..\Run: [Windows Update] C:\mt.exe
O4 - HKLM\..\Run: [Adware Remover] C:\mx.exe
O4 - HKLM\..\Run: [Virus Removal Tool] C:\ms.exe
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
Click on the fix checked button.
Close HJT.
Locate and delete the following bold files(if there).
C:\
mt.exe
C:\
mx.exe
C:\
ms.exe
C:\Program Files\
winupdates\winupdates.exe /auto
Reboot into normal mode and turn system restore back on.
Get some antivirus and firewall protection, such as AVG free and Zonealarm.
You can get them
HERE and
HERE.
Regards Howard
