Hello,
Please download and install APM from
here. Also download and install Ad-aware from
here.
Once you have installed Ad-aware, run the program and in the bottom right hand corner click Check For Updates. Update Ad-aware following the prompts and then close the program, we will use it later.
Now disconnect from the internet, restart Hijack This and put a checkmark next to the following entries:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\DRAS~1\LOCALS~1\Temp\sp.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\DRAS~1\LOCALS~1\Temp\sp.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about
:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about
:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about
:blank
O2 - BHO: (no name) - {71F13C21-CFA5-4C09-8A78-74F6E9D4C10A} - C:\WINDOWS\system32\pglh.dll
O18 - Filter: text/plain - {36323A1C-CAAB-4571-89CB-E0FB60FE6B52} - C:\WINDOWS\system32\pglh.dll
Now click Fix Checked
After you have done that, start APM.
In the top Window select
explorer.exe
After this, in the bottom Windows find
pglh.dll
Right click
pglh.dll and choose Unload.
Click OK
Delete the following files and folders. If you can't delete them in Normal Mode, Boot into
Safe Mode:
C:\WINDOWS\system32\
pglh.dll
Now Start Ad-aware
Click Start, select Perform Smart System Scan and then click Next.
When the scan has finished, put a checkmark next to all spyware found (or right click and click Select All) and then click Next to remove it. You will be asked to confirm the removal, confirm it. You will be returned to the start screen of Ad-aware. Close Ad-aware.
Reboot your PC.
Download Crap Cleaner from
here. Install it and then run it to clean your temporary folders.
Post a fresh Hijack This log.
