malware or what?

aliEnRIK

Is it running any better?

Run LSPFIX

There is another program to run but I wont be able to post the instructions until tomorrow

foreign_correspondent

yes, it does seem to be aliEnRik, fingers crossed - no rush, thanks so much for your help, you are very generous with your knowledge.

Ran LDPFIX it said 'no problems found'

aliEnRIK

Download HostsXpert
http://www.softpedia.com/get/Security/Security-Related/Hoster.shtml
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

aliEnRIK

Download CCLEANER (Make sure you click 'DOWNLOAD LATEST VERSION' ~ make sure YAHOO TOOLBAR is unticked on installation)
http://www.filehippo.com/download_ccleaner/
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)


reboot

Download GLARY UTILITIES (Make sure you click 'DOWNLOAD NOW' ~ UNTICK the ASK toolbar on installation)
http://www.download.com/Glary-Utilities/3000-2094_4-10508531.html
Run the ONE CLICK scan

foreign_correspondent

aliEnRIK wrote: »

Download CCLEANER (Make sure you click 'DOWNLOAD LATEST VERSION' ~ make sure YAHOO TOOLBAR is unticked on installation)
http://www.filehippo.com/download_ccleaner/
Run the CLEANER scan (UNTICK 'cookies')

Done all the above... when I get to here, I ran the REGISTRY scan, but it does not ask me to Backup the registry .....
Then run the REGISTRY scan (Backup the registry when it asks)

what should I do now? Thanks

aliEnRIK

You scanned with the BLUE registry cleaner part? ~

foreign_correspondent

yip, thats the one

here -

aliEnRIK

when you click to FIX them it should have asked to back them up.

No worries anyways. Id say your good to go if everything seems ok

foreign_correspondent

coolio - I will try the next bit then - wish me luck!

foreign_correspondent

ok, Ive done that, this is what glaryscan comes up with...