Try this and post back the log it produces if it doesnt
solve the problem,Also copy this to notepad to you can
still view it when you reboot into safe mode.
Please download, install, and update the free version of
Ewido Security Suite
http://www.ewido.net/en/download
When installing, under "Additional Options"
uncheck "Install background guard" and "Install scan via
context menu".
From the main ewido screen, click on update in the left
menu, then click the Start update button.
After the update finishes
(the status bar at the bottom will display "Update
successful")
Exit Ewido. DO NOT scan yet.
Download CCleaner and install, but do not run it yet.
http://www.ccleaner.com/download122.asp
Boot into safe mode(Reboot and keep tapping F8 and choose
safe mode from the list)
Run Ewido again
Click on the Scanner button in the left menu, then click
on Complete System Scan. If ewido finds anything, it will
pop up a notification. Press Remove for each item thats
found, If you are unsure of an entry, select "none" for
the time being. I'll see that in the log you will post
later and let you know if ewido needs to be run again.
When the scan finishes it will give you some options at
the bottom of the screen, click on "Save Report". This
will create a text file. Make sure you know where to find
this file again.
Run MSAS on a full system scan and remove anything found
Run Ccleaner and press "Run Cleaner"
Next goto "start menu" and "Control Panel",
Then "Internet Options" and goto the "programs tab",
Press "Reset Web Settings" then goto the "general tab"
and enter the homepage address you want to use into the
space provided then press apply
Then reboot back to normal mode and make sure your system
is clean if you have any problems then post the ewido
scan log that you saved as it will make things abit
easier once we know what put this junk got on your system.
You do not need to turn off your dsl connection when you
are not online, just getting the system clean will be
enough, something is being missed if it keeps returning
so I'm sure we can find the cause with the help of a few
scanners like ewido and put a end to it. If ewido & MSAS
shows no problems and you still have problems then use
Hijack This
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Save it to desktop or c/drive and run Hijack This, Choose
to run a system scan and save the logfile and post that
back and I will check all the entries for any signs of
malware, Note- Most of what Hijack This lists is
essential to your system so post the log before removing
anything
Regards Andy
