I'm going to give you another program to stop your auto starts and auto starting services so don't remove them using HJT.
For now Microsoft Security Essentials is certainly sufficient for an anti-virus program. No, I don't use it myself, I use Avira Free which gets very high ratings and I am pleased with it. I can give you the link for that later if you wish and also some choices for another firewall but first let's get the computer thoroughly cleaned and then we can discuss those choices.
There ARE some fixes you still need to do with HJT though. You have a lot of listings for toolbars and search links for a website inbox.com. I am going to advise you remove these with HJT because the site itself doesn't get very good ratings via Web Of Trust, which I will also advise you to install shortly. I will explain it then.
Here is the list of fixes you need to do with HiJackThis;
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://toolbar.inbox.com/search/disp...b_id&%language
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx?tbid=80305
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://toolbar.inbox.com/help/sa_cus...spx?tbid=80305
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=wfxt2
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askR...8&gct=&gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx?tbid=80305
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox.com/help/sa_cus...spx?tbid=80305
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - (no file)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.5.7.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Filter hijack: text/html - {45aa1a38-9341-4fc6-bdbb-c001f0b34fef} - (no file)
Be sure you put check marks next to ALL of the above and then click the Fix Checked button. Exit HJT. Reboot and do another HJT scan and post it back here, then I will give you the other program to remove the auto starts, that will take care of all those, especially the Spamsubtract and Open Office, plus several others.
You are doing a great job and thanks so much for sticking with this in a rapid way. Your computer should be thoroughly clean when this all is completed.
Judy


Reply With Quote