[cinders]

I went to bleepingcomputer.com and downloaded and ran the Autoruns program. I deleted the MessengerPlus2 entry. Attached is a new hijackthis log. Does everything look ok now?

Regards,
cinders

[evilfantasy]

Clean log!!!

Time to do some cleanup and secure the work you have done.

• Click START then RUN
• Now type Combofix /u in the runbox
• Make sure there's a space between Combofix and /u
• Then hit Enter.

• The above procedure will:
• Delete the following:
• ComboFix and its associated files and folders.
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Set a new, clean Restore Point.

Download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop.

1. Double click OTMoveIt2.exe to launch it.
2. Click on the CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)

• When finished exit out of OTMoveIt2

Learn more about how to protect yourself while on the internet read this article by Tony Klien: So how did I get infected in the first place?

Let me know how everything is now.

[cinders]

PC seems to be running fine. Thanks for your help.

Regards,
cinders

[evilfantasy]

Good to know, I will mark this thread as Solved. if any new problems come up please start a new thread.

Thanks.