Thanks to Crockett for this information;
Run two or three free web based AV scanners. http://housecall.trendmicro.com/ http://www.ewido.net/en/onlinescan/ http://www.eset.com/threat-center/cac.php http://www.bitdefender.com/scan8/ http://www.kaspersky.com/virusscanner http://www.pandasoftware.com/products/ActiveScan.htm http://security.symantec.com/ http://www.windowsecurity.com/trojanscan/
Record the malware names, and file names and locations, of any malware the scans find. Repair, quarantine or delete any malware found.
Download 5 tools...Download:
Trend Micro CWShredder:
http://www.trendmicro.com/ftp/produ.../cwshredder.exe
EliteToolbar Remover:
http://www.simplytech.it/ETRemover/
McAfee AVERT Stinger:
http://vil.nai.com/vil/stinger/
SUPERAntiSpyware:
http://www.superantispyware.com/dow...ANTISPYWAREFREE
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download
An alternate download site for CWShredder and HijackThis is
Subratam.org
Save them to your Desktop or folder of your choice. (I prefer to make a folder called "Downloads" in which I place all downloaded files into).
Run CWShredder. With it open and
ALL other windows closed let CWshredder FIX all problems. Do this from Safe Mode.
http://service1.symantec.com/SUPPOR...src=sec_doc_nam
* If CWShredder doesn't run:
* Download PepiMK's CoolWWWSearch.Smartsearch killer.
http://www.safer-networking.org/files/delcwssk.zip
* Run CoolWWWSearch.Smartsearch.
* Then return to CWShredder to clean up.
* In CWShredder, click "check for update".
* If an update is available, click "Download and open the update".
* Click "Scan only".
* If Coolwebsearch keeps returning, or if a scanner says you have
cws.searchx, you need to take some extra steps before you carry on to see what else you have:
http://www.spywareinfo.com/~merijn/cwschronicles.html
*If you need to find the "hidden appinit value" used by certain versions of CoolWebSearch, then go here:
http://forums.subratam.org/index.php?showtopic=583 for step-by-step instructions.
Run McAfee AVERT Stinger.
*If necessary, click the Add or Browse button to add additional drives/directories to scan. By default the C: drive will be scanned.
*Click the "Scan Now" button to begin scanning.
*By default Stinger will repair all infected files found.
Run SUPERAntiSpyware. Make sure all other windows, including your browser, is closed.
*Click the Check for Updates button.
*Once the update has finished, exit SUPERAntiSpyware. Please do NOT run a scan yet!
*Open SUPERAntiSpyware and click the Scan your Computer button.
*Check Perform Complete Scan and then click Next.
*Make sure that all items found have a check next to them, and then click Next.
*Click 'Finish' and you will be taken back to the main interface.
*It could be possible that it will ask you to reboot your computer in order to delete some files after reboot.
Run SpyBot S&D. Make sure all other windows are Closed and your browser isn't running.
* Click on "Update" in the left column.
* Click on "Search for Updates".
* Select a download location (usually one close to you).
* Click "Download Updates" and wait of the updating process to finish.
* Check that all Internet Explorer (web browser) windows are closed.
* Click "Search and Destroy" in the left column.
* Click "Check for Problems".
* Have Spybot remove/fix all the problems it identifies in
RED. The items not listed in red should not be touched at this time.
Spybot S&D Tutorial:
http://www.bleepingcomputer.com/for...uter-tut43.html Download, install, update and run an Anti-Trojan Application.
Comodo BOClean:
http://www.comodo.com/boclean/boclean.html
Reboot and see if you still have problems.