Hi Dylan, can you try the following
Let me know how everythings running later
Please Download and UNZIP to desktop
p2pnetwork.zipMake sure you unzip this so you now have
p2pnetwork.bfu extracted to desktop
==Download and UNZIP to desktop
BFU.zipSo you now have BFU.exe extracted to desktop
==Download and Install this small program
to help clean your temp folders,cookies, etc...
Windows Cleanup! 4.0Don't run this yet, we'll need it in a bit
Alternate download location if having trouble with the first link
If you don't have the latest version of Ad-Aware
Download and Install
Ad-Aware SE Personal 1.06When installing allow to remove previous versions
Open Ad-Aware, ensure to click the
check for updates now link and
Connect to download the latest updates
Make sure it's updated but don't run a scan yet
==Download and then Install
Ewido Security SuiteWhen installing, under "Additional Options"
Uncheck "Install background guard" and "Install scan via context menu".
When you run ewido for the first time, IF you get a warning "Database could not be found!". Click OK. We'll fix that next
From the main ewido screen, click on
Update in the left menu, then click the
Start update button.
After the update finishes (the status bar at the bottom will display "Update successful")
Close out Ewido for now, we'll need it later
If for some reason the Updater won't work can you manually download the
Updates from this link after you have Ewido installed
http://www.ewido.net/en/download/updates/Now that you have the tools,
Please Print this out or save these instructions to a Notepad file and save it to your Desktop
Access your Add/Remove programs via Control panel and remove if found
Hotbar and/or SpamBlockerUtilityIt's from an unreliable source that can cause popups on your computer
Viewpoint <-Normally not user choice installed, you may have more than one instance, remove them all
Also, if you didn't intentionally install
Party Poker remove it too
RESTART your Computer in
SAFE MODEYou can do this by tapping the F8 key as the system is restarting, just before Windows loads, or use the link
I supplied for a more detailed explanation
Stay disconnected from the Internet
Double click to run
BFU.exeUse the "Open Script file" button (the folder icon next to Scriptfile to execute)
Navigate to
p2pnetwork.bfu on your desktop
Right click p2pnetwork.bfu and choose Select
In Brute Force Uninstaller select
ExecuteLet it finish then Exit
Find and delete the following folders if they still exist
C:\Program Files\
SpamBlockerUtility <-folder
C:\Program Files\
inscdm <-folder
and the next ones too if removed
C:\Program Files\
ViewpointC:\Program Files\
PartyPoker==Open
Windows CleanUp!>>START>>programs>>Cleanup!
Click on the CleanUp button, let it finish scanning for files
DECLINE to Log off or Restart when scan is done.
==Open Ewido Security Suite
Click on the
Scanner button on the left menu
Select
Complete System Scan*If Ewido finds something it will prompt you with "Infected Object found"
Ensure the following are Selected
*1. Perform Action = Remove
*2. Create Encrypted Backup in Quarantine (Recommended)
*3. Perform action with all infections
Then click OK
When Ewido has finished it's scan click the "Save Report" button
Save the report to desktop
Exit Ewido
Do another scan with Hijackthis and put a check next to these entries:
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {70DD309B-29FD-CB6C-1596-7A8788517096} - C:\Program Files\inscdm\cgkhqbmvku.dll (file missing)
O2 - BHO: SpamBlockerUtility - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\SpamBlockerUtility\Bin\4.6.1.0\SbHostIE.dll
O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINNT\system32\navshext.dll (file missing)
O3 - Toolbar: SpamBlockerUtility - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\SpamBlockerUtility\Bin\4.6.1.0\SbHostIE.dll
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\AIM95_c0\aim.exe (file missing)Remove the next one too: Not malicious, but not needed on startup
Registration reminder
O4 - Startup: PowerReg Scheduler.exeFix the next ones if PartyPoker was uninstalled
O9 - Extra button: PartyPoker.com -{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9-Extra'Tools'menuitem:PartyPoker.com{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
- C:\Program Files\PartyPoker\PartyPoker.exeAfter you have ticked the above entries, close
All other open windows,
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis
Open
Ad-Aware 1.06Click START
Click the radio button to Perform a Full system scan then click NEXT
When it's finished scanning
At this point you should either right click on the screen and and choose the "Select All" Objects option or individually put a checkmark in each objects checkbox
click on the Next button. Ad-Aware SE will now present you with a confirmation box as to whether or not you would like to remove the objects you have just selected. Press the "OK" button
RESTART your computer back to Normal mode
Back in windows
Run Hijackthis again and post a fresh log
Also include the whole report from Ewidos you saved earlier
