rvasanth,
Hi and welcome to the Daniweb forums :).
-
Run HiJackThis and click "Scan", then check(tick) the following, if present:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.cgcbgarunwrojzwcur.com/H...Utq4CLGbOsA.php
O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
Now, with all windows closed except HiJackThis, click "Fix checked".
===============
To help protect your system from hostile ActiveX content, or special 'downloadable' files:
Download, install and keep updated, SpywareBlaster . If you've installed it for the first time:
1) Check for any available updates; if present, they'll be automatically downloaded and installed.
2) Next, "Enable all protection".
3) Exit the program.
-
Note: Remember to regularly check for updates.
===============
After rebooting your PC, rescan with hijackthis and post a new log.
Let me know how things are now.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
Let's try this;
-
We need to remove(uninstall) the 'lop' infection by going to here , then downloading and running the uninstaller(s) that relate to the application(s) your wanting to remove. The following selections are available: "Start page", "Search engine", "Accessories Toolbar".
After uninstalling any (or all) of the above, let's see if we have anything in "Scheduled Tasks":
Download, unzip and run ScheduledTasks.bat (courtesy of ddeerrff), and when notepad comes up, post the contents back to this thread.
===============
Still in HiJackThis, click "Scan", then check(tick) the following, if present:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.kbnzsipltfjqwjxgzncim.bi...tq4CLGbOsA.html
Now, with all windows closed except HiJackThis, click "Fix checked".
===============
After rebooting your PC, rescan with hijackthis and post a new log.
Let me know how things are now.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
