You also have a Look2Me infection, we will deal with that after SSK.
I am going to give you the fix from my website here..
SurfSideKick Removal
NOTE: There are several variants of SurfSideKick. Not all the files, folders, and HijackThis entries will be present on your sytem. If you do not find one or more of the items listed, just continue with the fix.
Print out these instructions.
Download and Install:
- CCleaner
- HijackThis
- Unlocker (Windows 2000/XP Only)
Download to your Desktop:
- SSKfix98 (Windows 98/ME only)
- SSKfixXP (Windows 2000/XP only)
Read and Understand the following:
- How to view hidden, system files & folders!
- How to search for hidden files on Windows XP
Identifying SurfSideKick
In HijackThis look for lines similar to the ones belowR3 - URLSearchHook: (no name) - {000AB005-FF12-42C2-8DF5-39E12E5F9C91} - C:\Program Files\SurfSideKick\SskBho.dll
O4 - HKLM\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe
O4 - HKCU\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
O20 - AppInit_DLLs: repairs.dll
O20 - AppInit_DLLs: repairs302972943.dll (NOTE: This may have a different number)Close all browsers and keep them closed throughout the entire removal process.
Step 1 - Stopping running Processes
In HJT Choose Open the Misc Tools Section choose Process Manager, Highlight:C:\Program Files\Common Files\VCClient\VCClient.exe
C:\Program Files\Common Files\VCClient\VCMain.exeChooseKill Process
NOTE: If VCClient.exe and VCMain.exe are not present then continue.
Step 2 - Uninstalling SurfSideKick
Using Add or Remove Programs in the Control Panel uninstall the following:
Surfsidekick
Surfsidekick 2
Surfsidekick 3
If SurfSideKick is not in Add or Remove Programs, do the following:
Open Windows Explorer and check to see if any of the below exist. If not, skip to Step 3 - Cleaning. Otherwise continue with the below:
C:\Program Files\SurfSideKick
C:\Program Files\SurfSideKick 2
C:\Program Files\SurfSideKick 3
If one or more of the above SSK entries are found in Program Files do the following:
Start -> Run
Type "C:\Program Files\SurfSideKick\ssk.exe" /u -> OK
Start -> Run
Type "C:\Program Files\SurfSideKick 2\ssk.exe" /u -> OK
Start -> Run
Type "C:\Program Files\SurfSideKick 3\ssk.exe" /u -> OK
WARNING: DO NOT reboot your computer if prompted to do so until you have run the uninstaller for each directory that is present.
Enter the given security code (generated automatically by the uninstaller) -> OK
Click on YES at the reboot prompt.
[img]http://img24.imageshack.us/img24/9371/ssk17gh.jpg[/img]
Make sure PC boots to Safe Mode.
Step 3 - Cleaning (Done While in Safe Mode)
Open Windows Explorer and browse to:
- For Win2K/XP it may be in c:\windows\system32 or c:\winnt\system32
- For Win9x/Me it may be in c:\windows\system or c:\windows
Look for all instances of:
repairs.dll
repairs302972940.dll
repairs302972943.dll
repairs302972958.dll
repairs302972970.dll
repairs302972979.dll
repairs302972982.dll
repairs302972985.dll
repairs302972988.dll
once located, right-click > Unlocker > Unlock All
If none of the repairs.dll can be found then search for all files on the local hard drive using the search function in the Start Menu.
[img]http://img239.imageshack.us/img239/9317/ssk25uu.jpg[/img]
NOTE: Windows98/ME Systems Unlocker won't be needed at all.
Immediately afterwards delete all instances of:
repairs.dll
repairs302972940.dll
repairs302972943.dll
repairs302972958.dll
repairs302972970.dll
repairs302972979.dll
repairs302972982.dll
repairs302972985.dll
repairs302972988.dll
Now follow the patch instructions for your system.
Patch Instructions:
~ Windows 98/ME ~
Run SSKfix98.exe
Run CCLeaner
Reboot in Normal Mode; run HijackThis and fix the following lines if they exist:R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
O4 - HKLM\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe (file missing)
O4 - HKCU\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe (file missing)
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe (file missing)
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe (file missing)
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe (file missing)
O20 - AppInit_DLLs: repairs.dll (file missing)
O20 - AppInit_DLLs: repairs302972943.dll (file missing) (NOTE: This may have a different number)Using Windows Explorer navigate to the following directories and delete them if they still exist:C:\Program Files\SurfSideKick
C:\Program Files\SurfSideKick 2
C:\Program Files\SurfSideKick 3
C:\Program Files\Common Files\VCClient
~ Windows 2000/XP ~
Now run SSKfixXP.exe (towards the end of the process it might boot your PC if that occurs, make sure you keep tapping on the F8 key to boot back in Safe Mode). Run the fix again to complete the process.
Boot back into Safe Mode.
Run CCLeaner
Reboot in Normal Mode; run HijackThis and fix the following lines if they exist:R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
O4 - HKLM\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe (file missing)
O4 - HKCU\..\Run: [SurfSideKick] C:\Program Files\SurfSideKick\Ssk.exe (file missing)
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe (file missing)
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe (file missing)
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe (file missing)
O20 - AppInit_DLLs: repairs.dll (file missing)
O20 - AppInit_DLLs: repairs302972943.dll (file missing) (NOTE: This may have a different number)Using Windows Explorer navigate to the following directories and delete them if they still exist:C:\Program Files\SurfSideKick
C:\Program Files\SurfSideKick 2
C:\Program Files\SurfSideKick 3
C:\Program Files\Common Files\VCClient
Reboot once more into Normal Mode and run HijackThis and post the log as an attachment.
![http://img24.imageshack.us/img24/9371/ssk17gh.jpg[/img]](http://img24.imageshack.us/img24/9371/ssk17gh.jpg%5B/img%5D){kind=link}
![http://img239.imageshack.us/img239/9317/ssk25uu.jpg[/img]](http://img239.imageshack.us/img239/9317/ssk25uu.jpg%5B/img%5D){kind=link}