There is an exellent scanner out there called ewido (www.ewido.net). It does a great job. Here are detailed instructions how to use it. If you have any problems post back :).

Please download and...

Sorry for confusing you, just trying to help :).

Not sure I understand your last post.

lol_hacker101-

Please do not bump old topics, expessially when it is not constructive.

Hello, please run HJT again, select do system scan only, and check these items.


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =...

patrick5050, please do the following.

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Sorry for jumping in, but you are infected. Please run HJT again, select do system scan only, and check these items.

F1 - win.ini: run=lxcgppls.exe

O21 - SSODL: rjgoitr -...

Hello, and welcome to DaniWeb. Please run HJT again and select "DO system scan only". Then check these items.

C:\DOCUME~1\MARK'S~1\LOCALS~1\Temp\Rar$EX19.406\Bitlord Pro (UseNext) incl...

Hello, and welcome to DaniWeb. Please run HJT again (Select do system scan only), and place a check next to these items.


O2 - BHO: IncrediFindBHO Class - {0199DF25-9820-4bd5-9FEE-5A765AB4371E}...

Just please post a new HJT log.

Along with a description of how the computer is doing.

Moved to virus forum.

Joe, we do these logs all the time :). There like a second language to us :).

Edit: Actually you posted this twice. Continue here.
...

Hi, please run HJT agian, and check these items.


O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\system32\ixt0.dll (file missing)

O4 - HKLM\..\Run: ...

Hi, this is a short log, if you ran it in safe mode. Please post a new one in normal mode.

But, no matter waht, please check these items in HJT.

N3 - Netscape 7:...

Hi, Please run HJT again, and check these items.


O2 - BHO: PREAT IE LightFrame - {43D29D14-460E-4F3A-9037-E60F11EF12F0} - C:\WINDOWS\system32\LightFrame3IECOM.dll

O4 - HKLM\..\Run: [.nvsvc]...

Sorry we missed you, we have been very shorthanded. Please run HJT again, and check these items.

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...YYUS_undefined
...

I am very sorry for the late reply.

Please run HJT again, and check these items.

O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\rwinspex.exe CORN003

O4 - HKLM\..\Run:...

Please post another HJT log.

Begin by downloading CCleaner (http://www.filehippo.com/download_ccleaner/), and specifically choosing the most recent version.

Then, follow these steps:

1....

hi, sorry for the late reply.

Please check these now in HJT


O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\S2V2aW4gVG8\command.exe (file missing)


Also,...

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Hi, we will use Pocket Killbox to kill them.

Please download Pocket Killbox by O^E (http://www.hijackthisaid.org/tools/dls/click.php?id=3).
Save it to your desktop.
Please double-click...

Hi, and welcome.

Please run HJT again, and select Do system scan only, then check (tick) these items.


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =...

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Hi, and welcome.

Please run HJT again, and select Do system scan only, then check (tick) these items.



O20 - Winlogon Notify: Telephony - C:\WINDOWS\system32\ktr4l79q1.dll

O23 -...

Hi, and welcome.

Please run HJT again, and select Do system scan only, then check (tick) these items.


O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

...

Hi paranoia5,

First of all- welcome to Daniweb.

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might...

Please start by doing this, it will knock a big chunk of it out :).

Please download and install ewido anti-spyware tool (http://www.ewido.net/en/product/) Close all other Applications Select...

Ahhhh, so many piggybacks, will everyone please start there own topic, it gets way to confusing. Plus, there will be specific directions for each person.

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Please start your own topics, and do not piggyback on others.

Artistix, your new thread can be found here.

http://www.daniweb.com/techtalkforums/thread50093.html

Hi, we ask members not to "piggyback" on other topics, no matter how similar they are. I made you your own topic.

Please start by doing this.

Please download SmitfraudFix...

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Are the 04 entries some sort of script you did? i have never seen anything like that.

Edit:

Ok, pelase re-download HJT, and scan, do not change Any settings before scanning. Just start HJT go...

Download HijackThis (http://downloads.malwareremoval.com/hijackthis.zip) (current verison is v1.99.1)

or here (Alternate 1, a self-extracting zip file)...

Hmm, lets see if this will get your icons back.

Right click on your desktop, and click Arrange Icons by then ensure show Desktop Icons has a check next to it. If it doesn't click it.

Yep, indeed clean, happy to mark this one as solved :).

If you odnt know what the 017 entries are, check those, then click fix checked.

Besides that, you look goood :)

@DMR - The lines...They are gone!

Now, please check these items in HJT.


O2 - BHO: (no name) - {2BE520F1-8FEA-45E9-A00D-395CC5693200} - C:\WINDOWS\system32\ursrs.dll (file missing)


...

Hi, I am sorry I missed you.

Please run HJT again, and check these items.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://sidesearch.dropspam.com/sidesearch.htm

...

Hi, please run HJT again, and check these items.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0

O4 - HKLM\..\Run: [d75b91fb.exe]...

I hate to say this, but it is pretty hard to read that log, with all those lines in it ;). We will pick up with the fresh ewido log, and aHJT log with no lines :).

Thanks

Please post the log, that HJT outputs.


Then Please download SmitfraudFix (http://siri.urz.free.fr/Fix/SmitfraudFix.zip) (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your...