Cannot open the control panel. adware spyware

[prashanth]

Hi there,

I scaned the computer with Hijackthis and the log is as below. The scan results are attached.
Can you please help?

[saving space - attachment deleted by admin]

[Broni]

I'll take a look, but meanwhile....
You can't run HijackThis from temporary folder. Before you apply any fixes, I'll give you, you have to create HijackThis folder in C:\Program Files, and move hijackthis.exe file there.
Don't proceed before you do so.

[Broni]

1. Print this post out, since you won't have an access to it, at some point.

2. Download, and install Spybot (if you don't have it) from here: http://www.download.com/3000-2144-10122137.html

3. Close all windows, except for HJT.

3a. Go Start>Control Panel>Add/Remove, and uninstall AVSystemCare

4. Put a checkmark next to the following HJT entries:

- R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} - - (no file)

- O4 - HKLM\..\Run: [rtasks] C:\Program Files\AVSystemCare\rtasks.exe

- O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

- O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://w4s2.work4sure.com/c/ge/w4sgeen10.exe



5. Click on "Fix It" button.

6. Restart your computer in Safe Mode (keep tapping F8 key, when your computer starts)

7. Run Spybot (check for updates, first), and fix whatever it asks you to fix.

8. Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to "Show hidden files, and folders".

9. Delete following files (if they still exist):

- AVSystemCare folder from C:\Program Files

10. Turn off System Restore:

- Windows XP:
   1. Click Start.
   2. Right-click the My Computer icon, and then click Properties.
   3. Click the System Restore tab.
   4. Check "Turn off System Restore".
   5. Click Apply.   
   6.  When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
   7. Click OK.
- Windows Vista:
   1. Click Start.
   2. Right-click the Computer icon, and then click Properties.
   3. Click on System Protection under the Tasks column on the left side
   4. Click on Continue on the "User Account Control" window that pops up
   5. Under the System Protection tab, find Available Disks
   6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C:")
   7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
   8. Click OK

11. Restart in Normal Mode.

12. Turn System Restore on.

13. Run HJT again, and post back its log back here.

[prashanth]

Thanks for your lightning response. log is attached.
Thanks for your help!

[saving space - attachment deleted by admin]

[Broni]

Your HJT log is nice, and clean. Can you access your Control Panel, now?

[prashanth]

Hi there,

Not yet. I cannot access both Control panel or Calendar. Please help.
I could do it only in Safe Mode.

[Broni]

What exactly happens when you try to access Control Panel? Doesn't respond at all?
What Calendar are we talking about?

Try this:
1.   Press CTRL+ALT+DEL, and then click Task Manager.
2.   Click the Processes tab, and then click the Conime.exe process.
3.   Click End Process, and then click Yes to confirm.
4.   Close Task Manager.

I'll be out for a few hours.

[evilfantasy]

Couple of different things to try.

1. Go to the Start Menu > Run > control.exe

2. Right click on Task Bar > Properties > Start Menu tab > make sure Start Menu is selected below and click on Customize > Advanced > under Start Menu Items you'll see Control Panel > select whatever you prefer and click on OK

3. Go to the Start Menu > Run > appwiz.cpl