Open up Hijackthis.
Click on do a system scan only.
Place a checkmark next to these lines(if still present).
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: InternetSoftware - {AF7E9EBB-E1CF-7F7C-C608-13185698F3E9} - C:\Program Files\InternetSoftware\InternetSoftware-2.dll
O3 - Toolbar: The netadv - {F17B1418-2C0C-4295-BD55-BCDD3C730FBE} - C:\WINDOWS\netadv.dll (file missing)
Then close all windows except Hijackthis and click
Fix Checked
Close HijackThis.
Delete the following files and folders if still present,
C:\Program Files\InternetSoftware\InternetSoftware-2.dll<-----------
this folder
C:\WINDOWS\netadv.dll<---------------
this file
I would like you to do an online scan so that we can what else may be in your system,
Run Kaspersky online scanner
With the exception of Internet Explorer, which must be used for this scan,
keep ALL programs closed
Note:
It is recommended to disable onboard antivirus program and antispyware programs while performing scans to speed up scan time and to make sure there are no conflicts.
Do not go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable resident antivirus protection along with whatever antispyware application you use.
Do an online scan with
Kaspersky Online Scanner in Internet Explorer. You will be prompted to install and run an
ActiveX component from Kaspersky, Click
Yes.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75%. Once the licence accepted, reset to 100%.
- The program will launch and then start to download the latest definition files.
- Once the scanner is installed and the definitions downloaded, click Next.
- Now click on Scan Settings
- In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database:
o Extended (If available, otherwise use standard)
o Scan Options:
o Scan Archives
o Scan Mail Bases
- Click OK
- Under select a target to scan, select My Computer
- The scan will take a while so be patient and let it run.
- Please do not use your computer while the scan is running. Once the scan is complete it will display if your system has been infected.
- Click the Save Report As... button (see red arrow below)
- In the Save as... prompt, select Desktop
- In the File name box, name the file
- In the Save as type prompt, select Text file (see below)
- Include the report in your next post.
Run HijackThis again and post a fresh log.
So in your next reply you should have,
1)Kaspersky scan
2)Fresh HJT log
