First
Read: Only use these HJT-instructions when asked!
/P/ Process needs to be stopped
/S/ Service needs to be stopped
/U/ UNinstall anything to do with this
Transfer the text from between these dotted lines underneath to between the dotted lines of that post.
Make sure to follow
ALL instructions
in SEQUENCE, and in HiJackThis tick/fix
ALL lines!
...................................................................................................
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://g.msn.com/0SEENUS/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://home.netscape.com/home/winsearch200.html
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
/P/ O4 - HKLM\..\Run: [Win32 USB2 Driver]
winsnd32.exe
/P/ O4 - HKLM\..\Run: [REERGRUNRNT] C:\WINNT\
m.exe
/P/U/ O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\
MYWEBS~1\bar\2.bin\mwsoemon.exe
/S/ O4 - HKLM\..\RunServices: [Win32 USB2 Driver] winsnd32.exe
O4 - HKLM\..\RunOnce: [Win32 USB2 Driver] winsnd32.exe
O4 - HKCU\..\Run: [Win32 USB2 Driver] winsnd32.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
/P/U/ O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\
AWS\WEATHE~1\WEATHER.EXE 1
O4 - HKCU\..\RunOnce: [Win32 USB2 Driver] winsnd32.exe
O8 - Extra context menu item: &Search -
http://bar.mywebsearch.com/menusearch.html?p=ZNxdm006BNUS
Fix ALL your O16 - DPF: entries
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = psg.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = psg.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = psg.local
Unless these IP-numbers are from your ISP, fix this O17 also
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A982096-C3C4-4052-A692-EA36E8FD0F7E}: NameServer = 209.50.196.70,209.50.192.70
O23 - Service: Network DDE (NetDDE) - Unknown owner - C:\WINNT\system32\netdde.exe (file missing)
O23 - Service: Network DDE DSDM (NetDDEdsdm) - Unknown owner - C:\WINNT\system32\netdde.exe (file missing)
...................................................................................................
STOP using that crappy IE (other than for Windows-updates) and install Firefox from www.getfirefox.com
And it is HIGH TIME you install SP4!