Uninstall
Combofix:
Go
Start > Run
Type in:
combofix /u
Note the space between the "combofix" and the "/u"
Restart computer.
1.
Print this post out, since you won't have an access to it, at some point.
2. Close all windows, except for HijackThis.
3. Put a checkmark next to the following HijackThis entries:
- O3 - Toolbar: (no name) - {68FF9E0F-2E96-4467-87FA-1A8B9734C7E7} - (no file)
- O4 - HKUS\S-1-5-18\..\Run: [SYS32DLL] SYS32DLL (User 'SYSTEM')
- O4 - HKUS\.DEFAULT\..\Run: [SYS32DLL] SYS32DLL (User 'Default user')
- O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present (To be fixed if not done intentionally. Fix this entry if you did not activate the 'Lock homepage from changes' option in some kind of anti-spyware tool)
- O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
- O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
- O15 - Trusted Zone: *.antimalwareguard.com
- O15 - Trusted Zone: *.gomyhit.com
- O15 - Trusted Zone: *.antimalwareguard.com (HKLM)
- O15 - Trusted Zone: *.gomyhit.com (HKLM)
4. Click on
Fix checked button.
5. Restart computer.
6. Post new HijackThis log.
