I notice that you have Spybot's TeaTimer running. While this is normally a wonderful tool to protect against hijackers, it can also interfere with HijackThis fixes. So please disable TeaTimer by doing the following:
- Run Spybot-S&D
- Go to the Mode menu, and make sure "Advanced Mode" is selected
- On the left hand side, choose Tools -> Resident
- Uncheck "Resident TeaTimer" and OK any prompts
You can reenable TeaTimer once your system is clean.
Unplug your computer from the internet.
Now reboot into safe mode(
without networking support) by
tapping your F8 key upon restart and safe mode screen appears, select safe mode and press enter.
Run hijackthis and click on
"scan system only" button and put checks next to these:
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O4 - HKCU\..\RunOnce: [OSSProxy] c:\program files\relevantknowledge\rlvknlg.exe -bootinstall
Please close ALL browser windows (including this one).
Everything closed out but hijackthis and click on
"fix checked"
Navigate to these files or folders using Windows Explorer (OR Start -> Search) and delete (if present):
DELETE FOLDERS
c:\program files\
relevantknowledge
Reboot your PC.
* Please download
Malwarebytes' Anti-Malware from
HERE or
HERE
Double Click
mbam-setup.exe to install the application.
* Make sure a
checkmark is placed next to
Update Malwarebytes' Anti-Malware and z
Launch Malwarebytes Anti-Malware, then click
Finish.
* If an update is found, it will download and install the
latest version.
* Once the program has loaded, select
"Perform Full Scan", then
click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete,
click OK, then
Show Results to view the results.
* Make sure that
everything is checked, and click
Remove Selected.
* When
disinfection is completed, a log will open in
Notepad and you may be prompted to
Restart.(See Extra Note)
* The log is automatically saved by
MBAM and can be viewed by clicking the
Logs tab in MBAM.
*
Copy&Paste the
entire report in your next reply along with a fresh
HijackThis log.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.