Boot up in safemode and then fix this entry with hijackthis:

And download and run this Fix:
http://www.visualtour.com/downloads/xp_fix.exe

Same for this one:
http://www.kellys-korner-xp.com/regs...cmdrestore.vbs

And if after that you still have cmd problems then download and unzip this:
http://www.kellys-korner-xp.com/regs_edits/cmd.zip

And replace youre current cmd.exe with it.


When done , post a new hjt log please.


PS, what kind of internet connection do you have? Unless you have dial up , updating Ewido should only take a few seconds.

OK I'll try installing and running those programs.

Also, I assume you want the Free Trial Version when using Ewido?

I removed the O2 _BHO WebDiObj file. And ran the two programs. The Cmd.exe still didnt work for me though. Heres the new Hijack this...

Yup , use the free trial version. And have you tried replacing the CMD file aswell?

Also i see you have Salfeld Child Control 2003 - parental control software installed , could that be setup to have an "internet time limit" ?

And youre hjt log is clean now , but these dont really have to be there:

O15 - Trusted Zone: *.musicmatch.com (HKLM)
O15 - Trusted Zone: *.musicmatch.com

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 6:25:51 PM, 5/10/2006
+ Report-Checksum: 7BB89EB1

+ Scan result:

No infected objects found.


::Report End

----------------



It was strange, at first it found ALOT of infected files, but then it would freeze when I wanted to try and run it. Then after I reinstallted it, it found no files. I guess maybe it already removed them

Ewido probebly indeed removed them already , and it also probebly where mostly cookies. Youre logs look clean now.



Have you also seen the above? Did the first work , and could the second be a possibility?

Where do you want me to replace the CMD.exe? In the Accessories part, of the WINDOWS folder? I ran it by itself and It still gave me errors.

Also, I have no idea what a Salfield Child Control 2003 is. I never installed it, so I have no idea how to disable it.

You can copy the new cmd.exe to the windows/system32 folder , when asked if you want to overwrite the existing file say yes.

And have a look for an uninstaller in add/remove programs for that Salfeld child controll app and uninstall it if present. It can also be listed as Salfeld personal security manager.

There is also a change that it is not from that Salfeld app btw , there is also a trojan that uses the same name.


If not present in add/remove programs then boot in safemode and fix this entry with hjt:

Reboot and post a new hjt log please.