http://ad.cs102175.com/desktop/redirect.aspx?width=1&height=1&SiteID=adsi.3236/RON

Re: http://ad.cs102175.com/desktop/redirect.aspx?width=1&height=1&SiteID=adsi.3236/RO

You MUST follow the directions in the READ & RUN ME exactly as written to attach the file. You cannot attacht he HTML file so what we are telling you to do is just rename the file to have a .txt extension rather than a .html extension. Then you upload the .txt file.

You need to re-run CounterSpy and let it fix all the malware it found. You told it to IGNORE everything. There is no sense in running the tools unless you allow them to fix the problems. Re-run it and let it fix things. Attach a new log.

By the way many of your problems are due to installing and using the malware infected Kazaa program. Uninstall Kazaa Media Desktop 2.1 as was requested in step 0 of the READ ME.

You also should have uninstalled the below in step 0 of the READ ME, so uninstall them now:
My Web Search (Outlook, Outlook Express, and IncrediMail)
Viewpoint Manager (Remove Only)


You also did not follow the directions in the READ ME properly. If you did, you would not be using Spybot - Search & Destroy 1.3 which has not been used in over two years. Uninstall this, REBOOT, and then download and install from the link in the READ ME. Then run a new scan and fix anything it finds.

After doing all of the above make sure to attach the new log from CounterSpy along with new logs from ShowNew and HJT.


Questions:

1. Is your copy of Ewido a paid or free trial version?
2. Did you choose the below settings (i.e., are they valid)?
   • R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lifeteen.com/
   • R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.e4me.com
3. At one time were you using Symantec for your security software. I'm wondering why I see the below service installed and running:
   • Symantec System Center Discovery Service (NSCTOP)

 

You don't need to re-run the READ ME. You should just address all the items I mentioned. Also you must not start a new thread. Stay in this thread.


I will be away for 9 days! Hopefully one of the other helpers here can continue to help you! Or you will have to wait until I get back!