I did steps 1-6 and got home page back but

You will need to do the steps again as you have HJT installed in the exact place we mention not to in C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe and run from a ZIP file.

You are running your log from safe mode or using a startup manager eg. Msconfig.

You have a browser window still open and as many hijacks are browser baised, having an open window will not remove the pest, the guide clearly states to close all browser windows before running HJT and dont run from Safe Mode.



The guide
Hi and welcome do please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis


When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

• Bitdefender
• Panda Scan
• HijackThis