First move HJT to a permanent folder such as C:\HJT or something similar.
Run HJT and check the following lines.
O2 - BHO: (no name) - {3804d9e6-a539-49f4-9fd2-77808ba25d56} - C:\WINDOWS\system32\dhcnet.dll
O2 - BHO: WTLHelper Object - {75DC57F8-D831-4AB8-86B7-4F826F4A0873} - C:\WINDOWS\system32\vtsqr.dll
O20 - Winlogon Notify: dhcnet - C:\WINDOWS\SYSTEM32\dhcnet.dll
O20 - Winlogon Notify: vtsqr - C:\WINDOWS\system32\vtsqr.dll
Close all other windows and click fix checked.
Now download vundofix from here and run it.
Plz Download Pocket Killbox from here . We might have to use it later.
Please download and install ewido anti-spyware tool Close all other Applications Select language click Ok
Click I Agree
Click next
Click Install
Click Finish
Wait Ewido will open main screen automatically.
Wait again a few minutes and Ewido Should Auto update itself. If it doesn't click update at top of screen.
This in very important to get updates
When updating has finished. Close Ewido.
If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.Next, please reboot your computer in Safe Mode by doing the following:
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
Instead of Windows loading as normal, a menu should appear use arrow up to highlight
Select the first option, to run Windows in Safe Mode hit enter.
For additional help in booting into Safe Mode, see the following site: HERE
You MUST manage to get into Safe Mode for the fix to work.
Make sure to close all open windows/programs/folders. Have nothing else open while ewido performs its scan!Open Ewido
Click on scanner top of Ewido sceen
Click on Settings
Under How to Act click on Recommended Action choose Quarantine
Under How to scan all boxes should be selected
Under Possibly unwanted software all boxes should be selected
On right side under Reports: click on Automatically generate report after every scan.
Under What to scan select scan every file
Click On scan Tab
Click on Complete system scan
Let the program scan the machine It can take awhile give it time.
When scan has finished At bottom of screen click Apply all Actions
Click Save report
Click Save Report as (Save as window's screen should pop up.)
Click desktop
Click Save
Exit ewido
While still in safe mode use My Computer to delete the following files if they exist.
C:\WINDOWS\system32\vtsqr.dll
C:\WINDOWS\system32\dhcnet.dll
If that doesn't work. Then open Killbox and do the following.
Check the box that says delete on reboot.
Click on the open folder icon.
Navagate to the files above and select them and press control+c.
X out of the open file box.
Go to File>>Paste from clipboard.
The files should be in the drop down box.
There should be two buttons, one should say single file the other says all files.
Click on the one that says all files.
Make sure you have all other windows closed and click the kill button(Red circle with a white X)
Killbox will reboot your computer back to normal mode.
Post the Ewido log along with a new HJT log.
Still having problems?
