:-) Hi John,
I see just a couple of things in your
HJT log. You certainly have the right protection on your PC
Let's get you cleaned up completely and see if we can't get your update to run.
To start with I would like you to do this:
First disable system restore to prevent re-infection.
(you can turn it back on when youre pc is clean).
How to disable system restore:
WinXP.
Click the Start button.
Right-click My Computer, and then click Properties.
On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.
Then please delete your temporary files by deleting all files and folders that are in those folders:
(do not delete the temp folder itself)
(if there are "files in use" then empty these folders in safemode(hit f8 when booting up)
empty the C:\windows\prefetch folder ,
empty the C:\windows\temp folder ,
empty the C:\Documents and Settings\
Your Account\Local Settings\Temp folder ,
empty the C:\Documents and Settings\
Your Account\Local Settings\Temporary Internet Files folder EXCEPT the content.ie5 folder (may be hidden).
And close all instances of IE and OE ,then go to: Control Panel / Internet Options / General tab.
Click the "Delete Files" button.
When prompted place a check in: "Delete all offline content", click OK. This removes the junk files such as downloaded files, zero byte files created by Outlook Express and many other hidden files that reside in your cache.
Then please do this since it?s better to use automated tools to get rid of the bad stuff use these programs first before doing the final cleaning with
HJT.
Open ewido and update, then click on scanner, then settings, make sure all options are selected and that scan all files is also selected. Run your ewido scan fixing everything it finds.
Spybot: Search And Destroy:
If you do not have version 1.4 please;
1.
Download the new version (1.4) of
'Spybot: Search And Destroy'.
2. Install it according to the instructions in
'How To Setup Spybot SD'.
3. Next,
'Search for Updates' as the definitions are not likely to be up-to-date.
4.
Close ALL windows except Spybot SD.
5. Click the
"Check for Problems" button.
6. Click
'Fix Selected Problems' and fix only the
RED items.
7.
REBOOT to finish removing what Spybot SD found and clear memory.
Ad-Aware SE by Lavasoft:
If you do not have the most recent update please;
1.
Download 'Ad-Aware SE'.
2. Install according to the instructions in
"How To Setup Ad-Aware SE"
3. Next,
'Check for Updates' by clicking on the
'world globe' second from the right at the top of your Ad-Aware SE window.
4. Install the
updates.
5.
Close ALL windows except Ad-Aware SE.
6. Click on
'Start' and choose
'full scan' for a full scan.
7.
Quarantine anything that it finds and
SAVE the log file.
8.
REBOOT to finish removing what Ad-Aware SE found and clear memory.
Then rerun HijackThis and fix any of these items that are still showing
R3 - Default URLSearchHook is missing
O8 - Extra context menu item: &Search -
http://bar.mywebsearch.com/menusearc...p=ZNxdm119YYMY
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
Then we'll look at some things that could also be blocking your install.
Look forward to your reply.
TTFN
T
[Answered] Not sure infected or not
Linear Mode
