Run HJT and put a check next to this:


O4 - HKLM\..\Run: [start thunk dead 32] C:\Documents and Settings\All Users\Application Data\way deaf start thunk\Drive Readme.exe


Nothing open but hijackthis and click on fix checked


Now reboot into safe mode by tapping your F8 key upon restart and safe mode screen appears, select safe mode and press enter.


Delete this folder:

C:\Documents and Settings\All Users\Application Data\way deaf start thunk


reboot normal mode and...


Let's do an online scan with bitdefender:


Go here BitDefender and run an online scan with BitDefender (you will need to use Internet Explorer for this scan). When the ActiveX Control has loaded, click on "Click here to scan" and grab a coffee.

When BitDefender completes the scan, select the "Detected Problems" tab. Click on "Click here to export scan". Save the file as an HTML to your Desktop. Then click on the saved file and allow it to open with your browser. Go to Edit - Select All then copy/paste that log back here. Post back and let us know what it found (post the log).

And post a new HJT log also..

__________________
Stalking and killing Spyware

Have we helped you? Please consider a donation to help keep D-A-L free. Click on donate below



MALWARE: READ FIRST Procedures:
|_ SpyBot V1.5 _|_ HijackThis Log __V2.0.2 _|



ASAP: promoting a high standard and quality of security support no matter where you seek help.