Google taken over by porn links

Please read the announcement and sticky threads. HJT logs should only be posted when requested.

You need to goto to Add/Remove Programs and uninstall MessengerPlus! 3. It can put all kinds of bad stuff on your PC, including a LOP infection.

Download LSP - Fix

Now run LSP-Fix.

Check the Box labeled "I know what I'm doing" and then click on the flsmngr.dll file (in the “Keep” section) to select it.

Then, Select the >> button to move flsmngr.dll into the Remove section.

Now, click the Finish Button. When the Repair Summary box appears, click OK.
If it is already in the Remove section, just click Finish.

If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O4 - HKLM\..\Run: [IEXPLORE.EXE] C:\Program Files\Internet Explorer\IEXPLORE.EXE
After clicking Fix, exit HJT.
Boot into safe mode and use Windows Explorer to delete:
c:\windows\system32\flsmngr.dll

Now run Ccleaner (installed while running the READ ME FIRST). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.
Now reboot in normal mode and post a new HJT log. And tell us how things are working.

 

Have HijackThis fix the below line if still present:

O4 - HKLM\..\RunOnce: [MessengerPlusUninstall] C:\WINDOWS\system32\cmd.exe /C "C:\DOCUME~1\CHRISB~1\LOCALS~1\Temp\MsgPlusUninst.bat"

Then reboot and let me know where things stand.

 

It was probably just due to the cleanup. Sometimes this happens and a second reboot works fine.