A big thank you to LOCOENG for the sticky Please point out possible errors, improvements, typoes, etc. in replies to this thread. Thank you! Welcome to AfterDawn! If you're in this forum, chances are you have a malware problem and you need help. However, before you post, there are certain steps that we want you to follow to ensure that the cleaning of your computer is as easy and painless as possible Please read this post in its entirety before you proceed with doing anything. First and foremost: Every person on this forum is an actual human being, who has a life. The helpers are not automatons or robots that are always submitting to your every will. Things will go a lot smoother if you keep this in mind. Also, no matter how tempting it may seem, do not look at another user who has the same problem as you and follow the instructions provided to them. Chances are that you will not have the same problem and will need unique instructions. Do not make duplicate topics. These just confuse the people helping you and potentially waste energy for two or more people. You may bump if you haven't gotten a reply for one or two days. Finally, and very importantly, don't be afraid to ask questions! There are no stupid questions. If you don't understand something, it is better to ask first and delay things a small bit than do something wrong and make a potential mistake that could stop your system from ever booting again. Now that you've read the above (you did read it, right...), let's get started. Please follow these instructions in order, there is a reason that there is an order. Step One: Clean with ATF Cleaner This is purely a prepatory step to make your computer run faster and to get rid of a bit of possible malware. Please download ATF Cleaner and save it to your Desktop. This program is for XP and Windows 2000 only!! Do not use it if you are not using one of these operating systems. 1. Double-click ATF-Cleaner.exe to run the program. 2. Under Main choose: Select All 3. Click the Empty Selected button 4a. If you use FireFox: Click "FireFox" at the top and choose "Select All". Click the Empty Selected button. 4b. If you use Opera: Click "Opera" at the top and choose "Select All". Click the Empty Selected button. If you would like to keep your saved passwords for FireFox or Opera, you should select "No" at the prompt. Step Two: Scan with Kapsersky WebSacanner This step is a malware detection step. It will identify much of the malware on your computer, but it will not remove it. Please do an online scan with Kaspersky WebScanner: Click on the link, then click Accept. You will be prompted to install an ActiveX Component from Kaspersky, click Yes. The program will launch and then begin downloading the latest definition files. Once the files have been downloaded click on Next, now click on Scan Settings, and n the scan settings make that the following are selected: - Scan using the following Anti-Virus database: --- Extended (if available otherwise Standard) - Scan Options: --- Scan Archives --- Scan Mail Bases Click OK. Now, under "Select a Target to Scan", select My Computer. The scanner will start to scan your system. The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button, and save the file to your desktop. Copy this information into your first post. Step Three: Update Windows XP if necessary Update Windows --- Service Pack 1a First, follow this instruction on how to find out what Service Pack you have. If you have Service Pack 1a or Service Pack 2, follow the directions in the first paragraph; otherwise, follow the directions in the second. An unprotected and un-updated installation of Windows XP will get infected and re-infected time and time again, relatively quickly. Please click the "Update Windows" link above and follow the instructions to update your system. Important note: If you do not have any Service Packs installed on Windows XP, do not perform the above instruction. Instead, click the "Service Pack 1a" link. This is because, although Service Pack does have many great security updates, installing it onto a computer with certain malware will cause system conflicts and complicate things greatly. Only install Service Pack 2 after you are clean. You otherwise risk possibly unrecoverable complications. Step Four: Reboot your computer This step should be self-explanatory. Reboot your computer, and proceed with the next and final step. Step Five: HijackThis Once you have rebooted your computer, get back onto the forum and post a HijackThis log Click here to download the installer for HijackThis. Save HJTInstall.exe to your desktop. Doubleclick on the HJTInstall.exe icon on your desktop. By default it will install to C:\Program Files\Trend Micro\HijackThis . Click on Install. It will create a HijackThis icon on the desktop. Once installed, it will launch Hijackthis. Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log. Post the contents of the HijackThis log in a new topic describing your problem. DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required for the smooth operation of your system. ==================================================================== Please state somewhere in your first post that you have performed these steps. Finally, thank you for stopping by at AfterDawn!