Hi Aiglon,
Phase two then.. :) WinTools is a pain in the butt, but we're getting there. :)
I just noticed that you are using an out of date version of HJT. Could you please open HJT, click on
Config | Misc. Tools | Check for Updates and follow the prompts, then in the updated HJT go into
Config | Misc Tools | Open Host File Manager and check for the
01 entries listed in the log.. delete them if found. Then post a new log. CWS didn't show up in the last log, but the later version gives me more info.
So..
Please download CWShredder from
here update and then run it (Click the
Fix--> button, rather than the
Scan button. Then run HJT and fix the following entries..
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O4 - HKCU\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
Then boot into safe mode and find and delete the following folder..[b]
C:\PROGRA~1\COMMON~1\
WinTools
Then reboot and post the new updated log, and we'll see how well we're doing.. :)
Cheers
Liam