Boot into safe mode. See how HERE.
http://www.bleepingcomputer.com/forums/tutorial61.html
Turn off system restore.(XP/ME only) See how HERE.
http://www.bleepingcomputer.com/forums/tutorial56.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.
http://www.bleepingcomputer.com/forums/tutorial62.html
Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.
Click on the processes tab and end process for(if there).
gba2218.exe
atmclk.exe
dcomcfg.exe
Close task manager.
Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://as.starware.com/dp/search?x=wKX1ILEOi+Vh7AfA98Gm4Me69ZMbubcDqLpVXxUyHVrEi UoeOGP3A7ZL5xd9ZNkHFz0Dk5biSlkjpnU0J5cO6d5NXY/HuM1+KAMW4zNN9+3OP0qFSyFroUsh747DA mt79/JM8HyFrzUKSroG5qOIkt4/kx3x0Ao+FD4hy1TTWzbLIfohtonxqrvLgzntUqKlhxLEJRjXKYA=
O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp9CD3.tmp
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} -
http://207.226.177.98/gba2218.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
Click on the fix checked button.
Close HJT.
Locate and delete the following
bold files(if there).
gba2218.exe
C:\WINDOWS\system32\
hp9CD3.tmp
C:\WINDOWS\system32\
atmclk.exe
C:\WINDOWS\system32\
dcomcfg.exe
Reboot into normal mode and turn system restore back on.
Now go and download the free AVG antivirus programme from
HERE.
Aslo, download the free Zonealarm firewall programme from
HERE.
Install Zonealarm, followed by AVG. Reboot your system, then run the AVG updates.
Running a computer with no antivirus and firewall isn`t very smart and probably accounts for your system getting infected in the first place.
Regards Howard
