Hi sheurwayne,
Your HJT log shows the presence of the "WebDir" adware parasite. It also indicates that you have downloaded (perhaps not knowingly) the bogus "ErrorGuard" program, which you should not install. ErrorGuard is a malicious piece of adware which masquerades as a helpful utility program.
** Note that your log also indicates that you are running two antivirus programs concurrently (AVG and McAfee), and this is not advised because the two programs can conflict with each other. It is OK to use McAfee's firewall utility with AVG's antivirus, but choose only one of antivirus programs and uninstall the other.
Please do the following:
You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.
1. Download ATF-Cleaner and save it to convenient location.
2. Download the free version of AVG Anti-Spyware (formerly ewido). Save the installer file to your desktop or any convenient folder.
* Run the installer, accepting the default options. Run the program once installed, click on the Update icon at the top of the main AVG window, and allow the program to download the most current components.
* Close AVG once the updates have been downloaded.
3. Run a new HijackThis scan, put a chekc in the boxes to the left of the following entries, and then click the "Fix checked" button. Close HJT after it finishes the fixes:
O2 - BHO: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} - C:\WINDOWS\DLP.dll
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
4. Reboot into Safe Mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up).
* Double-click ATF-Cleaner.exe to run the program.
- Click the Main menu option.
- Check the Select All box. (Uncheck cookies if you do not want them removed).
- Click the Empty Selected button.
If you use Firefox browser:
- Click the Firefox menu option.
- Check the Select All box. (Uncheck cookies if you do not want them removed).
- Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, click No at the prompt.
- Click Exit on the Main menu to close the program.
* Run AVG Anti-Spyware.
- Click on the "Scanner" icon just to the right of the Update icon. In the Scanner window, click on the "Settings" tab.
- Under "How to act?", click on "Recommended actions" and choose "Delete" from the resulting menu.
- All boxes under "How to scan" and "Possibly unwanted..." should be checked.
- Under "Reports", check "Automatically generate report after every scan".
- Under "What to scan", select "Scan every file".
- Click on the "Scan" tab, and then click on "Complete System Scan" to start scanning. It usually takes at least 40 minutes to complete a full scan.
Once the scan is complete, a window listing all infected objects (if any are found) will be displayed. Below the list of infected objects, make sure the Set all elements to: option is set to Delete and then click the Apply all actions button.
After the malicious items are deleted, you will be given the option to save the scan report; do that. The report is saved as a text file in the C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports folder. (The actual filename is a combination of the date and time of the scan.)
* Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files".
* Look in your C:\WINDOWS folder to verify that the DLP.dll no longer exists there. If it does still exist, delete it.
5. Empty your Recycle Bin and reboot normally.
6. Run HJT again and post the new log. Also paste the entire contents of the AVG Anti-Spyware report.
