Browser Hijacker cannot remove.

Welcome to Majorgeeks!

You skipped step 6 of the READ ME. Both online scans must be run and both logs from the online scanners must be attached. This must be done before using HijackThis. I'll give you a fix below, but you really should do these scans and attach the logs so we can be sure we find everything.

Why are you running your PC with no protection. You have no antivirus and no firewall and you probably had not antispyware before adding Windows Defender from the READ ME.


Make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O2 - BHO: (no name) - {07C95E1A-6BBC-4A4E-AEB5-CE99AF2190FF} - C:\Program Files\Windows NT\howekes.dll
O16 - DPF: {886DDE35-E585-11D0-A707-000000521958} - http://69.56.176.76/webplugin.cab
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

After clicking Fix, exit HJT.
Boot into safe mode and use Windows Explorer to delete:
C:\Program Files\Windows NT\howekes.dll
If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.
Now run Ccleaner (installed while running the READ ME FIRST).

Now reboot in normal mode and post a new HJT log.

Make sure you tell me how things are working now.

Reminder Note: Once we have determined you are malware free you will need to disable System Restore, reboot, and re-enable system restore per step 1 of the READ & RUN ME. This only applies to if using WinXP or WinMe.