Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
Unzip HijackThis into this folder. When you run HijackThis from this folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary.


Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.


F0 - system.ini: Shell=Explorer.exe D:\WINDOWS\services.exe

F1 - win.ini: load=D:\WINDOWS\serv ices.exe

F1 - win.ini: run=D:\WINDOWS\servi ces.exe



Reboot and dun hijack and post new log .