Major Help needed...Waaaaaaaaa

Hi guys, great forum very helpful to an old codger like me, I've read all the do's and don'ts and am trying to adhere to your rules, so here goes:-

Two problems - a) My home page has been hijacked by Search-Control
and my email send receive in outlook has stopped working, it keeps hanging.

I have been running winXP, Panda antivirus, Ad-Aware, spybot, spywareblaster and zone alarm. Browser is IE6.0.2800.1106

I've also downloaded all your suggested anti-spy thingies, that I didn't already have, eg CW shredder, Kill2me, etc

I've carried out all your scanning and cleaning steps, and I've also run Hijackthis and deleted the Search-control items but to no avail.

Search control keeps coming back and my email still won't work....WAAAAAAA

Incidentally the email was working fine before all this hijack stuff started.

Please make an old man happy, before he pulls up his sleeves and gets out the safety razor!!!!

 

EDIT: I'm last again, darn it!!
Was a bit distracted and when I got back I didn't see you Chas.

PP

 

Thanks for the response, search-control has hijacked my browser again grrrrrr
anyway attached is the hijack log file converted into a txt file as requested, I hope I've done it correctly.

Incidentally when I saved the HJT log, my antivirus popped up and said it had found a virus and disinfected it....the virus was Trj/comsys.A

thanks

TGHC

 

Hmmmm, the antivirus keeps popping up with the txt file I posted back to the forum, and when I try and close the virus found dialogue box it pops back up about 3 times before it stays down! Should I throw myself on my sword now?

TGHC

 

he's running 1.97.7

get the latest version before you post a new log.
http://www.majorgeeks.com/download3155.html

 

Hi again, thanks for your advice it is very much apreciated.

Ok I've followed your instructions, to the letter, with one exception, The file you said to delete in safe mode i.e. C:\WINDOWS\System32\TBC.dll was not there, however there was a file called C:\WINDOWS\System32\TBC with no extension, and itwas described as configuration settings 2kb, so I've left it alone pending your advice.

The latest HJT log is attached

TGHC

 

Thanks guys for your assistance, things have certainly improved, but not sure if I'm out of the woods completely.

Now that's odd, about the HJT version, because I did download it from the majorgeeks download link as you asked. I'll go through it again and check to see if I have both versions in my folders somewhwere, and I'll follow your advice on the hidden file extensions and get back to you.

once again thanks for your help

TGHC