I suspect I have more "issues" to deal with on my 4-year-old Dell. I therefore downloaded and ran hijack this.
You have a couple of issues.
The first is adialer. Remove this one manually with HjT, but make no other changes for now:
O16 - DPF: {841A9192-5690-11D4-A258-0040954A01BE} (DialXSCtl Object) - http://dialxs.nl/install/dialxs.ocx
Next, download Ad-aware , making sure that the data-file is up-to-date, but don't run it yet. Also download LSPFix , so you will have it if you need it (more on this later).
Another problem is New.net. While they claim that their software is not a hijacker (and have threatened legal action against some sites, read the PDFs), I just say, "If it waddles like a duck, and quacks like a duck..."
The first step is to go to the Add/Remove Programs menu, and try to remove it from there. If that fails, or you can't find it, a manual removal might be necessary (this key):
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup
Hotbar is another. Ad-Aware should take care of that one.
You may have a problem connecting once everything is removed. if so, one of your bits of malware replaced part of your Winsock chain with its own stuff. When you removed it, it may have "broken the chain". Here is the link to LSPFix , which should help.
musemaker then responded with: It worked! And here's the process order:
* Run LSPfix.
* Delete all Dial-up adapters and network protcols.
* Delete all Winsock and Winsock2 registry keys.
* Under Add/Remove programs uncheck all of the listings under Communications.
* Reboot and then add back ALL the Communications items (although netmeeting and chat weren't necessary). It didn't work for me the first time as I have no need for a dial-up adapter, but it is the only way to get Windows to add back winsock2.
* Reinstall network protocol settings.
These aren't really nasty, just totally worthless resource hogs:
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
Not needed anymore. Never useful to begin with.
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
Microsoft "trickleware" background downloader.
O4 - HKLM\..\RunServices: [MDM7] "C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE"
Absolutely not needed in normal operation.
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp3\winampa.exe
No need for this. Can also be disabled from within WinAmp. By the way, make sure that you have the newest version 5.03
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
Useless.
Once you are all cleaned up, download and install SpywareBlaster , a utility that blocks malware installation via ActiveX--the main vector that makes Internet Explorer so much more vunerable than Mozilla .
That should do it. Re-post when done.
