No, No don't wipe clean, Try the following two tools first! If these find either of the two items noted by PP they will remove them, if they aren't there neither tool will harm the computer BUT then we can try something else.

VundoFix by Atribune

  • Double-click VundoFix.exe to run it.
  • When VundoFix opens, click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log in the thread you are working in.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions above, starting from "Click the
Scan for Vundo button" when VundoFix appears at reboot.

To remove the latest forms of Qoologic infections, follow the steps below:

  • Download Qoofix to your Desktop or any other convient location
  • Unzip the files from Qoofix.zip to a convenient location such as C:\Qoofix.
  • Navigate to the folder you unzipped the files to and double click on the file named Qoofix.exe.
  • Finally, select Begin Removal and the removal process will commence. A reboot may be necessary if an infection is found.
Credit: Marcin Kleczynski redesigned LonnyRJones' Qoofix.bat program. Credit is all given to Merijn, Sean, Anil, Calvin, and Aaron.

Then run new HJT scan and post new log back here.