[scottmd1]

Hey Howard and team, first THANK YOU for the self help instructions on a.doginhispen...I have followed them and am hopefully clean.

Per your instructions I am posting a fresh "option 1" log from findAWF and a fresh log from Crusty...I mean HJT

Thanks in advance for the look.

[Howard]

Hello and welcome to

Your awf.txt is clean.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O16 - DPF: {2E4E43EA-F3C2-46B9-B387-A267E6969BD0} (voiceNow! Engage PC Client 1.0) - http://www.voicenow.com/engagegatewa...ushBrowser.cab

O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} - http://h30155.www3.hp.com/ediags/dd/...lMgr_v01_5.cab

O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.1.6.cab

O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/SCOTTM~1/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

Click on the fix checked button.

Close HJT and reboot your computer.

I`d like to check for any hidden nasties.

Download combofix.exe to your desktop. Double click combofix.exe & follow the prompts. A window will open with a warning. Type "1" (and Enter) to start the fix. When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log. Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

Combofix will automatically save the log file to C:\combofix.txt

Post the Combofix log as well as a fresh HJT log.

Please let me know what problems, if any, you`re having.

Regards Howard

This thread is for the use of scottmd1 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our malware Removal forum.

[scottmd1]

Combo Fix and a new HJT log after making the fixes you asked for....

Since I did the "self help" instructions you posted I have not had any problems...the only problem was the days it took me to find your site!!!

When downloading combofix Trend Micro did post up a "serious warning" for FREELOADER_SMITFRAUD

And, just out of curiosity.... crusty? Simpsons come to mind...but why crusty.exe?

[Howard]

The trend Trend alert is perfectly normal and Combofix should be allowed access.

Crusty.exe is just a name picked out of the hat. It wouldn`t really matter what it was called as long as it`s not HijackThis.exe. Obviously, it helps if I know what it`s called as then I don`t confuse it with anything else.

Your log files are clean and you`re almost ready to go.

Click start/run and type combofix /u into the run box and hit the enter key. Note the space between combofix and forward slash. This will uninstall Combofix and all it`s folders etc.

You can also get rid of the FindAWF tool.

Turn off system restore.(XP/ME only) See how HERE.

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.

You may want to have a read of this thread HERE.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of scottmd1 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our malware Removal forum.

[scottmd1]

Thanks again Howard...not only for your help but for posting up the self help instructions....really made the process simple and easy.

You rock!

[Howard]

Glad I could help mate.

I am now marking this thread solved.

If you need this thread re-opened please contact a moderator or PM me.

Regards Howard