Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. (Not a temporary folder or the desktop & not directly on your hard drive).
The reason for the above is because the majority of users have hijackthis running from a temporary folder. When hijackthis creates backups of the fixes it does, those backups reside in the same folder as itself. When the temp folder is cleaned out (as often is done during the clean up process of doing these logs) all the backups are deleted too! If something goes wrong, there is nothing to go back to. So, provided that hijackthis is in it'sown folder where the backups can go, & it's not in a temporary folder, you can put it where-ever you wish. Like this; C:\Documents and Settings\Administrator\My Documents\Hijackthis\hijackthis.exe good
C:\Hijackthis\hijackthis.exe good
C:\Program Files\Hijack this\HijackThis.exe good
C:\hijackthis.exe bad (because the backups will be scattered all over the hard drive)
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Hijackthis\hijackthis.exe bad (Even though hijackthis is in it's own folder, it is also in a temporary folder)
C:\temp\Hijack this\HijackThis.exe bad
Where you have yours is (obviously) good :) .
You should also not be running two anti virus programs at the same time. They can cause conflicts. You should stop one from starting at boot-up & use it as an on-demand scanner.
The following may not fix your problem but needs to be done;
Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box to the left of the following entries & click 'fix checked':
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus8.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/cus...://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {961F2BAB-B02B-29CB-ED37-05486C69ABE7} - (no file)
O4 - HKLM\..\Run: [DKNFIZJPS] C:\WINDOWS\DKNFIZJPS.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocach...etup1.0.0.8.cab
Reboot into safe mode following the instructions here & navigate to & delete the following if found:
C:\WINDOWS\DKNFIZJPS.exe
ALCXMNTR.EXE This will be in either the Windows folder or the system32 folder.
Reboot normally. If you have anything disabled in Msconfig, please re-enable them, reboot & post another log after that.
