dlh6213 27 Posting Maven Team Colleague

If you're trying F8 and it's not working, it's most likely a matter of timing. I prefer the msconfig route myself, I've never even tried the F8 (but that is the most common way).

dlh6213 27 Posting Maven Team Colleague

Were you able to connect to those sites before you set up the router? Can you connect now if you remove the router?

dlh6213 27 Posting Maven Team Colleague

Here are complete instructions for installing XP; go through it and see if you made any mistakes. Even if you don't think you did, start over and try again. If you can't get the CD to work, get the floppies as suggested in post #6.

Was your CD-ROM working before you tried to install XP?

dlh6213 27 Posting Maven Team Colleague

What OS do you have? Since you said it's new, I'll assume it's XP.

There are two ways to do this:

The most common is to reboot your computer and then repeatedly hit F8 while it's booting up.

The other way to to go to Start, Run, type in msconfig, and click OK. When the System Configuration Utility window comes up, click the BOOT.INI tab, select SAFEBOOT, and then OK. You will get asked to reboot and when you do, it will come up in Safe Mode.

When you're done in Safe Mode, go back to msconfig and remove the checkmark from SAFEMODE.

damithadnw commented: he is giving appropriate answers to the question. +0
dlh6213 27 Posting Maven Team Colleague

If that doesn't work, I had another idea. Also from the Screensaver tab, go to the Power button, and under Power schemes use the drop-down arrow, then select Always on. Then go down to the Settings for Always On power scheme and set all the options to Never.

Try these one at a time so we can, hopefully, determine where the problem lies.

dlh6213 27 Posting Maven Team Colleague

Did you remove and reapply the thermal compound? I would have guessed this was an overheating problem too. Most CPU's made by Intel will turn themselves off before overheating to the point of causing damage. Older AMD's didn't do this, not sure about the newer ones.

It is possible for this to be a power supply problem; it certainly shouldn't hurt anything to try it if you have another one.

When you're working inside the computer, are you using methods to prevent damage via static electricity? Like a wrist strap or frequently touching a metal part of the case?

If you decide to go for a new one...

Check out these at wal-mart.com:
http://www.walmart.com/catalog/product.gsp?product_id=3380786
I haven't used that OS, but if you don't like it, you can replace it with Win98 as Thong_Insector said.
http://www.walmart.com/catalog/product.gsp?product_id=3356855
This comes with Linspire OS (previously known as Lindows) which is an excellent OS, in my opinion, but again, if you don't like it, you can replace it.

And at Fry's (Outpost.com):
http://shop4.outpost.com/product/4199403?site=sr:SEARCH:MAIN_RSLT_PG
This one also has the Linspire OS

If you have either of these stores locally, you can save on shipping charges.

Dell also has good prices and sometimes have campaigns that offer free shipping.

dlh6213 27 Posting Maven Team Colleague

Find out what BIOS you have and do a search for it and 'beep codes' to find out what the warning actually is.

dlh6213 27 Posting Maven Team Colleague

I have an Inspiron 3800 that I recently installed WindowsXP on. The computer boots fine and works normally, except when i'm not doing anything on it. It will either completely lock up with the display still on or it will flash a blue screen for 2 seconds and reboot. It does this only when I am not running any programs or when i am using a web browser. When there is a program running that uses a lot of the processor or accesses the hard drive often there isnt a problem. For instance, when i turn on iTunes or any game this does not happen. Any ideas? I already updated my drivers and BIOS.

This is kind of a shot in the dark, but it sounds like some kind of problem with a screen saver. If you have a screen saver, disable it and see if it still happens.

Right-click on the desktop, go to Properties, click on the Screensaver tab, under Screensaver click on the drop-down arrow and select None, and then click OK.

dlh6213 27 Posting Maven Team Colleague

Why were you reformatting in the first place? Were you having a problem?

Why do you now think the drive has failed?

When you open the computer to see who the manufacturer is, remember to protect it from static electricty by wearing a wrist strap or frequently touching a metal part of the case. Most likely you will need to remove the hard drive in order to see the name on it.

If really do need to replace the drive, you should be able to do it yourself; instructions will come with the new drive, and you can find more detailed info on the web if you need it.

dlh6213 27 Posting Maven Team Colleague

Go to the link in caperjack's signature that says Software tools

At that page, go to:

Spyware-removers and get Spybot and AdAware

Spyware-preventions and get at least one, or all three, of the programs listed

Update and run all of those programs in Safe Mode and see if you still have the popup problem


On a side note, the fact that your sister-in-law is deaf and mute has little to do with the fact that she doesn't understand much about computers. As long as she can read, she can learn as much as she's interested in (there are also computer classes taught in ASL). It's just that she, as well as most of the public in general, isn't really interested in knowing any more than necessary to use the computer for her intended purpose. Someone who is deaf/mute is no different from you than someone who speaks a different language. (This isn't intended to offend, but to offer support in being more considerate and accepting, and understand that she's not all that different from anyone else).

dlh6213 27 Posting Maven Team Colleague

Here's a patch for IE with SP2:
http://support.microsoft.com/default.aspx?kbid=884020

Here is information about XP's firewall:
http://www.microsoft.com/windowsxp/using/security/internet/sp2_wfintro.mspx

Try disabling the firewall (do you have any other firewall?) and see if either browser is then able to access the web.

dlh6213 27 Posting Maven Team Colleague

Moved to the Virus forum, all hijackthis logs are to be posted in this forum

Also, please post all replies in this same thread, don't start a new one :)

Go to Add/Remove Programs in your Control Panel and remove (if found):
WeatherBug

Scan with HJT and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us4.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://srch-us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O9 - Extra button: MktBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\Program Files\MarketBrowser\lmt\MarketBrowser_Launch.xpy
O9 - Extra 'Tools' menuitem: MarketBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\Program Files\MarketBrowser\lmt\MarketBrowser_Launch.xpy
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - …

dlh6213 27 Posting Maven Team Colleague

It could be the firewall settings in SP2; I think there is also a patch for IE problems with SP2. Look through this thread and see if there is anything that helps (a link to the patch should be there, and I think instructions for the firewall are too):
http://www.daniweb.com/techtalkforums/thread10031.html

dlh6213 27 Posting Maven Team Colleague

If you still have clickoptimizer after doing as crunchie suggested, do a search for it and let us know where it is when you post your next HJT log.

dlh6213 27 Posting Maven Team Colleague

You didn't mention what the problem was that you needed help with.

You should go to Windows Update and get the Critical Updates for your system (and SpywareBlaster wouldn't hurt either).

dlh6213 27 Posting Maven Team Colleague

If you have SP2 installed and wish to use the net send command, have a look at this before using it:
http://support.microsoft.com/kb/839018

dlh6213 27 Posting Maven Team Colleague

We're not ganging up on you, we're just messing with you ;)

About this statement:
"(dlh6213, aka BEST MOD EVER!!!)"
There are a lot of great moderators here at Daniweb, who the 'best' is would depend on the particular forum because they all have their specialties.

I wouldn't qualify for 'Best' in any of them, I just try to do what I can to help out wherever I can (without messing up too much :) ). But I do appreciate your confidence :D.

Now to pick on you again; when are you going to clean up your signature :?:

dlh6213 27 Posting Maven Team Colleague

Well, the only thing I can think of would be to post a hijackthis log in the Virus forum to see if there's anything showing up on your system that coulb be causing the problem. There's a link to hijackthis in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

dlh6213 27 Posting Maven Team Colleague

I haven't heard of that one yet, but look through this thread and see if there is anything useful:
http://www.daniweb.com/techtalkforums/thread10031.html

Can you boot up at all, even in Safe Mode?

dlh6213 27 Posting Maven Team Colleague

There's no telling what could be wrong with the one at the charity shop. Unless they are willing to hook it up for you and let you see it run, you may end up putting more into it than a new one would cost -- and would still not be near the system!

I'm with godskitchen2004 on this one, I think you're better off getting a new system, and Dell usually has some pretty good deals. While you're at the library, you can do some shopping and comparing online yourself.

Whenever you need some help, this is the place to come! Good luck! :)

dlh6213 27 Posting Maven Team Colleague

Did they ever work on this computer? If they did, can you think of anything that might have been done to the system around the time they stopped working (hardware or software changes)?

dlh6213 27 Posting Maven Team Colleague

Did you ever run scandisk? Or run any diagnostics on the hard drive? It's not unheard of for new drives to go bad. Since this is a new computer, and still under warranty, your first step should be to contact Dell and see what they suggest you do next.

For complete instructions on installing XP, see this thread:
http://www.daniweb.com/techtalkforums/thread6632.html

If you did get infected (no way to ever know now), you should read this before going online again once you get it running:
http://www.daniweb.com/techtalkforums/thread16365.html

dlh6213 27 Posting Maven Team Colleague

That link didn't work for me, but perhaps it's just as well. If that article caused you so much trouble, why would you want others to read it?

dlh6213 27 Posting Maven Team Colleague

Scan with HJT and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
O2 - BHO: ZServObj Class - {00000000-C1EC-0345-6EC2-4D0300000000} - C:\WINDOWS\ZServ.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [farmmext] C:\WINDOWS\farmmext.exe
O4 - HKLM\..\Run: [jfqkog] c:\windows\system32\jfqkog.exe
O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1057.dll,InstantAccess

Close all windows other than HJT before you hit the Fix button

Reboot into Safe Mode

Open Windows Explorer, Folder Options, Tools, View, and select "Show hidden files and folders," and uncheck "Hide protected operating system files"

Go to
C:\Documents and Settings\All Users\Start Menu\Programs\Startup and delete hpfhtp.exe (don't delete this one if you know what it's for; I couldn't find any info on it at all -- good or bad -- but it looks like it could possibly be for something by Hewlett Packard)
C:\WINDOWS and delete ZServ.dll
C:\WINDOWS and delete systb.dll
C:\WINDOWS and delete farmmext.exe
C:\WINDOWS and delete wupdt.exe
C:\windows\system32 and delete jfqkog.exe

dlh6213 27 Posting Maven Team Colleague

Don't know if this will help, but it's all I see. Have HJT fix these entries:

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Close all windows other than HJT before hitting the Fix button.

Reboot into Safe Mode

Go to
C:\WINDOWS and delete the web folder

dlh6213 27 Posting Maven Team Colleague

I don't see anything in your log that should be causing a problem, but you can have HJT fix this one:
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)

Check here to see if this helps at all:
http://www.microsoft.com/windows/windowsmedia/knowledgecenter/mediaadvice/0035.aspx#Question4

If not, can you post the entire message along with any codes?

I wonder if Aqua Dock can be causing any conflicts... :confused:

dlh6213 27 Posting Maven Team Colleague

Did it run okay right after you installed XP, or have you been having trouble ever since?

Try running the programs you mentioned in Safe Mode. While still in Safe Mode, do this as well:

Open Windows Explorer, Folder Options, Tools, View, and select "show hidden files and folders," and uncheck "Hide protected operating system files".

For every user account listed under C:\Documents and Settings, delete the entire contents of these folders:
Local Settings\Temp
Cookies
History
Local Settings\Temporary Internet Files\Content.IE5

Delete the entire content of
C:\Windows\Temp folder
C:\Temp folder

Do a search for *.tmp and delete everything found

Empty your Recycle Bin

Let us know how much RAM you have, as previously requested, and let us know if your system runs any better after doing the above.

dlh6213 27 Posting Maven Team Colleague

See post #19 in this thread for some recommendations regarding ActiveX settings in IE (not the firewall):
http://www.daniweb.com/techtalkforums/showthread.php?t=15052&page=2&pp=15

dlh6213 27 Posting Maven Team Colleague

I am beginning to think the above website is a scam to try and get you to buy their product. I have went to it on antoher computer and it said the same thing. Plus I have never not ran antivirus software. let me know what you think.

I suspected the same thing, that's why I went directly to the McAfee site (not using the link in the suspect site) to see what they had to say about it and how to remove it, without purchasing something from the other site.

Can this thread be marked as solved now?

dlh6213 27 Posting Maven Team Colleague

If you get your Critical Updates (as suggested in post #3), it may help prevent some of these attacks. SpywareBlaster (link in crunchie's sig) will also help.

dlh6213 27 Posting Maven Team Colleague

My son does, LOL!! :lol: :lol:

dlh6213 27 Posting Maven Team Colleague

...i asked my dad... about this problem and he couldn't figure out what was wrong with it.

Mr. Hammy, you never asked me about this; I know posts are supposed to be answered within the thread, but we'll discuss this more later.

The "dumb ad" at the top is courtesy of Hotmail; not much you can do about that as long as you use free email services.

Hotmail has already identified these emails as "Junk." Occasionally they may make a mistake and put something in the Junk folder that you want to keep, but if there is anything in that folder that isn't something you were expecting (even if you recognize the name), you should delete it, or check with the person and see if they actually did send you something.

The correct forum for this would have been the Software forum :).

Rule 3: Post your next tech question in the appropriate Tech section please, or I'll tell your Dad on you!

Too late, I already found out!

dlh6213 27 Posting Maven Team Colleague

Here is a link to the fixes included in SP2:
http://support.microsoft.com/?kbid=811113

dlh6213 27 Posting Maven Team Colleague

According to McAfee, the only way to get this is by using P2P. Here are a few excerpts from the link provided below:

If you are using P2P software (Kazaa, Gnotella, Bearshare, Morpheus, eDonkey, eMule, etc.) be very careful with downloaded executable files.

The worm copies itself around and into the folder defined by "Kazaa\localcontent" registry key and into "kazaabackupfiles" subdirectory. Some copies may have enticing names (like "porn.exe", "Matrix Screensaver 1.5.scr", "Smart Ripper v2.7.exe", etc.) so other people may download the worm through P2P file sharing program. Once the downloaded copy of the worm is executed the cycle repeats itself.
Some variants can scan subnets for systems already infected by sub7 or kuang2 to spread furhter.

The worm can also accept remote commands and participate in, for example, a denial-of-service flood attack on a Web site.

Some variants include backdoor capabilities (remote cmd.exe, list files, retrieve files, keylog etc.), port redirection, the ablity to circumvent antivirus and firewalls and can spread using kazaa, kuang2 (port 17300) and sub7 (port 27347).

http://vil.mcafeesecurity.com/vil/content/v_100282.htm

Removal instructions are included in that link as well, but you should still do as crunchie recommended.

dlh6213 27 Posting Maven Team Colleague

Hey, if I clean my computer with Kleenex Anti-Viral Tissues, will that keep it from being infected?? :?:

(http://www.kleenex.com/us/products/av/upright.asp)

dlh6213 27 Posting Maven Team Colleague

I've heard of the freezer trick working, but it didn't for me the one time I tried it. I think it's mainly for a drive that won't spin though. If you want to try it, it shouldn't hurt anything as long as you put it in a plastic bag first.

If it does work, be prepared to backup everything as quickly as possible because it may not last long.

If that trick doesn't work, or you decide not to try it, to get your data back you can try hooking the drive up as a slave in a working computer and and see if you can access the files you want.

If you still can't see them, try this program:
http://www.snapfiles.com/get/restoration.html
It'll take awhile to recover a bazillion files, but if they're important, it may be worth the time. In the future, remember to backup often :)

dlh6213 27 Posting Maven Team Colleague

I have tried to install WMP 10 and still get the internal application error...

You may get some help with this if you post a new thread in the Software forum.

The only thing I see in your log that you may wish to consider has to do with CTHELPER.EXE; quote from sysinfo:

CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task. It also allows Creative speaker setup to be synchronized with Windows Control Panel speaker setting. Without it running that check box in Creative speaker setting is not functional (settings are not in sync). Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled unless you need it.

dlh6213 27 Posting Maven Team Colleague

The problem is I already reformatted before anyone told me that thye didn't have the book with the key on it. So your saying reformat again? I will look at prompt and see what happens. I was trying to get the win 98 cd to load at boot but that screen comes up instead for the key. I put in the key to the new copy of qin98 bu it says it is invalid., still old win 98.

Yes, unfortunately, I'm suggesting you reformat again. With the CD you have the Key for, you shouldn't have any trouble (fingers crossed :) ).

dlh6213 27 Posting Maven Team Colleague

If you can't find them as suggested, this program should help you recover them:
http://www.snapfiles.com/get/restoration.html

dlh6213 27 Posting Maven Team Colleague

I don't know how Compaq does it, but it should be there somewhere! It should be on the XP manual, or on the case of one of the Restore CD's, but may be on the case itself (I've never actually seen it on a case, but I've heard of it being put there). If you can't find it, contact the place you purchased the computer from and they should be able to help.

dlh6213 27 Posting Maven Team Colleague

Happy to hear it :D

I'll be marking this as solved now, so if anything else comes up, start a new thread.

Happy surfing!

dlh6213 27 Posting Maven Team Colleague

EDIT: Looks like I was beaten to it ;)

Yep :) I looked through Omni's other threads and those things you suggested, and more, have already been tried.

dlh6213 27 Posting Maven Team Colleague

There probably is a way to get it in DOS, but I don't know how. Can't you just reformat and start over with the Win98 you have the Key for? Might be quicker.

dlh6213 27 Posting Maven Team Colleague

This thread has attachments that describe the process for dual-boot systems, including fdisk. For Windows 98 only, just use the first part of either attachment:
http://www.daniweb.com/techtalkforums/thread11350.html

dlh6213 27 Posting Maven Team Colleague

I've looked at your other threads, and it seems to me that if you're still having problems a reformat/reinstall may be your best bet. As long as you're sure you have everything backed up, there shouldn't be any problems. Make sure you have all your recovery CD's, Product Key, and other software disks before you reformat. You can find detailed instructions here:
http://www.daniweb.com/techtalkforums/thread6632.html

dlh6213 27 Posting Maven Team Colleague

No more popups! :)

dlh6213 27 Posting Maven Team Colleague

Hey, welcome back Catweazle! Haven't seen you here in awhile.

I'm getting the same popup described by Chainsaw; I've been getting it for the past 2 or 3 days. (I'm still using IE) A screenshot is attached for your viewing pleasure, lol.

dlh6213 27 Posting Maven Team Colleague

Noadware may not be helping you much, see this review:
http://www.adwarereport.com/mt/archives/000023.html

I hope you made a backup of your registry before you made any changes... just in case.

You need to go to Windows Update to get the Critical Updates for your system, this can help prevent some of the problems you now have.

Scan with HJT and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\sp.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\sp.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = 192.168.0.1
O2 - BHO: (no name) - {FC0A3B14-AE44-4580-AA23-66DA9827250C} - C:\WINDOWS\SYSTEM\OBGA.DLL
O18 - Filter: text/html - {431B44F8-7BA1-41D5-81B7-8492E272BF71} - C:\WINDOWS\SYSTEM\OBGA.DLL
O18 - Filter: text/plain - {431B44F8-7BA1-41D5-81B7-8492E272BF71} - C:\WINDOWS\SYSTEM\OBGA.DLL
O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 192.168.0.1
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 4.2.2.2

Reboot into Safe Mode

Go to:
C:\WINDOWS\SYSTEM and delete OBGA.DLL

Reboot normally

Download the Hoster from here:
http://members.aol.com/toadbee/hoster.zip
Run Hoster and press Restore Original Hosts, OK, and Exit Program. Reboot.

Close all browser windows, scan with HJT, and post a new log please.

dlh6213 27 Posting Maven Team Colleague

Scan with HJT and have it fix the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://0ml.net/searchasst.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://0ml.net/cat
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://0ml.net/cat
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://0ml.net/cat
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://0ml.net/searchasst.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://0ml.net/cat
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://0ml.net/searchasst.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://0ml.net/cat
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://0ml.net/cat
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://0ml.net/cat
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://0ml.net/searchasst.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://0ml.net/cat
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = http://0ml.net/searchasst.html
O2 - BHO: (no name) - {CC036691-17AC-4CEB-A63A-33BB8432ECBB} - C:\WINDOWS\system32\imolaa.dll
O2 - BHO: (no name) - {CE7C3CF0-4B15-11D1-ABED-709549C10020} - C:\WINDOWS\system32\2g8oxrryue.dll
O3 - Toolbar: The Simple Toolbar Search - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA99EB} - C:\WINDOWS\system32\fipprudp0h.dll
O4 - Global Startup: RealAudio.exe
O9 - Extra button: The Simple Toolbar (HKLM)
O9 - Extra 'Tools' menuitem: The Simple Toolbar (HKLM)

Close all windows other than HJT before hitting the Fix button

Reboot into Safe Mode

Go to:
C:\WINDOWS\system32 and delete imolaa.dll
C:\WINDOWS\system32 and delete 2g8oxrryue.dll
C:\WINDOWS\system32 and delete fipprudp0h.dll

Reboot normally

Download the Hoster from here:
http://members.aol.com/toadbee/hoster.zip
Run Hoster and press …

dlh6213 27 Posting Maven Team Colleague

Hey Dark Omen, you didn't mention what version of Ad-Aware you're running, but you should have Ad-Aware SE and get the VX2 cleaner plugin:
http://russelltexas.com/malware/adawarese/vx2plugin.htm

In addition to the above, if you don't recognize any of the O16 entries, you should have HJT fix those as well; don't worry about making a mistake here, if any are legit they will come back next time you visit the site.

After you have HJT fix the things HawkeVIPER suggested, reboot into Safe Mode and go to:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup and delete hphunn.exe
C:\Program Files and delete the Viewpoint folder

Close all browser windows, scan with HJT, and post a new log please.