unlovedwarrior ... no problem. Please add anything at any time if you feel it would be useful.
Nhksrv.exe > Should be OK. See here ..
http://www.liutilities.com/products/wintaskspro/processlibrary/nhksrv/snmp.exe > Again, should be OK. Microsoft SNMP Agent service that allows the user to configure and manage the SNMP (Simple Network Managament Protocol).
****************
littelp24 ... You should print this put to help you follow the advice.
Make sure you have exposed all Hidden Files & Folders.
To enable the viewing of Hidden files follow these steps:
1. Close all programs so that you are at your desktop.
2. Double-click on the My Computer icon.
3. Select the Tools menu and click Folder Options.
4. After the new window appears select the View tab.
5. Put a checkmark in the checkbox labeled Display the contents of system folders.
6. Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
7. Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
8. Remove the checkmark from the checkbox labeled Hide protected operating system files.
9. Press the Apply button and then the OK button and close My Computer.
***********************
Download Ewido/AVG Anti Spyware from here ….
http://www.ewido.net/en/It has a fully working 30 day trial period.
Install it and update it to the latest definitions.
Do
NOT use it yet.
Now boot to safe mode. Here’s a “how to” if you’re not sure ..
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406When in safe mode run a full system scan with AVGAS and let it fix what it wants to.
REMEMBER TO SAVE THE SCAN REPORT and also remember
where you saved it.
[FOOTNOTE > this is a good program to use as an “on demand” scanner even after the trial period is over. Keep it updated and use it to scan your computer from time to time].
*******************
STILL in safe mode ... open HJT ... click on scan ... put tick/check marks next to these entries IF they are still present ...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - C:\Program Files\NetZero\Toolbar.dll (file missing)
O15 - Trusted Zone: http://www.match.com
O15 - Trusted Zone: http://www.mcartsworkshop.com
O15 - Trusted Zone: http://www.webkinz.com
O16 - DPF: {70522FA2-4656-11D5-B0E9-0050DAC24E8F} - http://download.iwon.com/ct/pm3/iwonpm1,0,2,5.cab Remember to close ALL open browser windows – including this one – before clicking on “Fix Checked” at the foot of the HijackThis window.
NOTE >> The 015 fixes above are optional. I would never keep anything in the Trusted Zone. It's just too dangerous. However, it's your choice to fix them or not.
*******************
Reboot to normal mode and use the computer as you would usually do.
*******************
Update your Webroot Spysweper to the latest definitions and scan the computer with it. Let it fix what it wants to.
*******************
Make sure you have the latest version of java installed. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update. Updating Java:- Download the latest version of Java Runtime Environment (JRE) 6.
- Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications"…..
- Click the "Download" button to the right.
- Check the box that says: "Accept License Agreement".
- The page will refresh.
- Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
- Close any programs you may have running - especially your web browser.
- Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
- Check any item with Java Runtime Environment (JRE or J2SE) in the name.
- Click the Remove or Change/Remove button.
- Repeat as many times as necessary to remove each Java versions.
- Reboot your computer once all Java components are removed.
- Then from your desktop double-click on jre-6-windowsi586-p.exe to install the newest version.
*******************
Also make sure your antivirus and firewall are both fully up to date.
*******************
Run a full system-wide search of your computer for
iwon. Post back the results here giving the locations of anything found.
Also post back a fresh HJT log and the scan report from AVG Anti Spyware.
Let us know if anything has improved.
OJ
