Hang in there, we'll get it.
Press Control-Alt-Del to enter the Task Manager.
Click on the Processes tab and end the following processes if listed:
netrm.exe
Exit the Task Manager when finished
Close ALLprograms down, leaving ONLY HijackThis running.
Place a check against the following items:
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {0AEDCEB7-DB98-2AC8-C751-7602FC73372C} - C:\WINDOWS\addgq32.dll
O4 - HKLM\..\Run: [netrm.exe] C:\WINDOWS\system32\netrm.exe
O4 - HKLM\..\RunOnce: [d3wd.exe] C:\WINDOWS\system32\d3wd.exe
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner
- C:\WINDOWS\system32\d3rl32.exe" /s (file missing)
Click on Fix Checked and exit HijackThis.
Delete these files if found:
C:\WINDOWS\addgq32.dll
C:\WINDOWS\system32\netrm.exe
C:\WINDOWS\system32\d3wd.exe
C:\WINDOWS\system32\d3rl32.exe <--this one may not be there
Run AboutBuster
Reboot and post a fresh HijackThis log and we'll take another look. MrC
