Im sorry again its not in a zip file but it says error on page when i click manage attachments and the pointer turns into what looks like a piece of meat or something for a split second. Thanks again!

Attached Files

SG HJT.txt (9.6 KB, 2 views)

No Problem SG, I will fix that for you.

My welcome to the forum as well. Let me take a look at your log and see where we are.

Be right back.

TTFN

LGW

Hey SG, did you also run ewido, and if so, do you have the log for that scan?

Before we fix the things showing on the HJT log, I would like to see what if anything ewido fixed.

Thanks,

Looking forward to your reply,

TTFN

LGW

Thanks.

Edit, added ewido log as attatchment
LGW

Attached Files

SG ewido.txt (5.4 KB, 2 views)

Thanks for that SG,

Can you please download both Spy Sweeper and Housecall from my signature. Do Spy Sweeper first, install and update it.

Then Housecall, it is an online virus scan, let it fix everything that it finds.

Next Please boot into Safe Mode, continually tapping the F8 key until a beep sounds or a menu pops up, use your arrow keys to navigate to Safe Mode and hit Enter.

Run CCleaner again as per the instructions you followed before.

Next run Spy Sweeper, click on Options, Sweep Options, make sure all of your harddrives are selected. Under What to Sweep, make sure that everything EXCEPT Do Not Sweep System Restore Folder are selected. Click on Sweep, Start. Let it fix everything that it finds. Save the Log (lower left corner at the end of the fix) to post back here.

Next run ewido again, let it fix everything that it finds.

Hit Ctrl, Alt + Del, under running processes, look for wupdmgr and osaupd, disable them if located.

Then click on Start, Run, and type MSCONFIG, hit Enter. Under the Startup tab locate wupdmgr.exe and osaupd.exe, if there, remove the tic from in front of them.

Got to Control Panel, Add/Remove Programs, look for osaupd and wupdmgr, uninstall them if located.

Locate and delete the files; C:\WINDOWS\osaupd.exe and C:\Windows\wupdmgr.exe

Now run HijackThis and fix any of the following that are still there;

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=382
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
O4 - Startup: HP Organize.lnk = ?

Now run CCleaner again, and reboot into regular mode.

Run HJT again and post the new log back here.

Look forward to your next reply,

TTFN

LGW