Please go to
Jotti's or to
virustotal and have these files scanned. Post the results back here.
C:\WINDOWS\system32\TmrService.exe
C:\PROGRA~1\BUGSDE~1\ugescw.exe
C:\WINDOWS\system32\tmr\WinTmr.exe
=========
Can you please do the following.
===============
Go to
Add/Remove programs and uninstall the following, if present:
MyWebSearch
The above could appear anywhere within the entry. Be careful not to remove any
personal or
system software.
===============
Scan with
HijackThis and then place a check next to all the following, if present:
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...tml?p=ZJfox000
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {87BE3784-6977-4E84-AA08-55A96B9CEAC5} (Bl_camera Control) - http://192.168.0.131/bl_camera.cab
Now, close
all instances of Internet Explorer and any other windows you have open except
HiJackThis, click "
Fix checked".
===============
To help protect your system from
hostile ActiveX content, or special '
downloadable' files:
Download, install and keep updated,
SpywareBlaster. If you've installed it for the first time:
1) Check for any available updates; if present, they'll be automatically downloaded and installed.
2) Next, "
Enable all protection".
3) Exit the program.
-
Note: Remember to regularly check for updates.
===============
After rebooting, rescan with hijackthis and post back a new log. Please let me know how your pc is now.