attached. please have a look.

Hi and welcome to the forum. You certainly do have some infection in there and a member of our excellent PC Security Team will be along to give you advice on that shortly.

Hi there Ale700.



Do you use the LogMeIn remote controll software youreself?

And i would uninstall and reinstall Net Nanny , i dont know whats going with it but it is running dozens of times the same service. Something wrong there for sure.


First go to add/remove programs and uninstall anything related to MyWebSearch that is present there.


Then please download Process Explorer by Systernals from HERE.

Also download KillBox by Option^Explicit from HERE.

Then boot up in SAFE MODE and stay in safe mode (hit f8 when booting up), untill the entire fix is done.

Unzip Process Explorer and double click on procexp.exe

In the top section of the Process Explorer screen double click on winlogon.exe to bring up the winlogon.exe properties screen. Click on the Threads tab at the top.
Once you see this screen click on each instance of winjrs32.dll once and then click the kill button.

After you have killed all of the winjrs32.dll's under winlogon click OK.
Next In the top section of the Process Exlporer screen again , double click on explorer.exe and again click once on each instance of winjrs32.dll then click the kill button.

Once you have done that click OK again.


Next run HijackThis and place a check beside each of the following:


And fix this one if you dont want to keep using that as startpage:


Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\SYSTEM32\winjrs32.dll

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)


And do you recoqnize this?

Can you look up the full file path of it , and upload the file in bold to this site:

http://www.virustotal.com/en/indexf.html

And then post back the full file path of the file , and the scanning result of it.

Also post a new hjt log to check please.