Everything seems to work fine now!
Malware Removal Forums
Web search is redirected....
31 min read
Great news ! 
Your log now appears to be clean.
Lets do a few things to tidy up.
Please do these in the order I suggest!
You can now delete the file we downloaded to the desktop.
imm32.dll
It's OK as long as theres one in the system32 folder.
__________________________________________
Go to start > run and copy and paste this in the field:
ComboFix /u
Make sure there's a space between Combofix and /
Then hit enter.
This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the
system/hidden files and resets System Restore again.
A few things to help with possible threats
These are optional . But will help protect you further.
___________________________________
SpywareBlaster
Install SpywareBlaster
SpywareBlaster will add a large list of programs and sites to your Internet Explorer settings that will protect you from accidentally running or downloading known malicious programs.
After the installation, click Download Latest Protection Updates. When it finishes, click Enable All Protection.
______________________________
SiteHound
http://www.firetrust.com/firetrustsitehound.html
This tool bar will help protect you from.
Over 4,000 fake bank and credit sites.
Tens of thousands of pornographic
and adult sites.
The never ending fake phishing sites.
Malicious sites, which can infect you
with spyware and adware if you visit
them.
Sites to download software which
may infect your computer with
spyware, a virus or adware
NOTE: This will slow only the initial startup of internet explorer. It doesn't have that effect on firefox.
___________________________________
Download and keep this updated and run weekly if you don't already have it.
spybot seach & destroy
Tutorial
___________________________________
Download and Install a HOSTS File
A Hosts file is a plain text file which prevents your computer from connecting to malware and spyware sites by redirecting the connection request to 127.0.0.1, which is your local address. If you use a proxy server, or if you are on AOL, be sure to read the special instructions.
You can download the MVPS Hosts File and see a HOSTS file tutorial here :
This website also contains useful tips, and links to other resources and utilities.
___________________________________
Make your Internet Explorer more secure
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click on the Security tab
3. Click the Internet icon so it becomes highlighted.
4. Click on Default Level and click Ok
5. Click on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialise and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
6. Next press the Apply button and then the OK to exit the Internet Properties page.
__________________________________________
Here's a site with great advise on how to AVOID malware. Much easier to do than removing it.
Safe and Happy Surfing.
Your log now appears to be clean.
Lets do a few things to tidy up.
Please do these in the order I suggest!
You can now delete the file we downloaded to the desktop.
imm32.dll
It's OK as long as theres one in the system32 folder.
__________________________________________
Go to start > run and copy and paste this in the field:
ComboFix /u
Make sure there's a space between Combofix and /
Then hit enter.
This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the
system/hidden files and resets System Restore again.
A few things to help with possible threats
These are optional . But will help protect you further.
___________________________________
SpywareBlaster
Install SpywareBlaster
SpywareBlaster will add a large list of programs and sites to your Internet Explorer settings that will protect you from accidentally running or downloading known malicious programs.
After the installation, click Download Latest Protection Updates. When it finishes, click Enable All Protection.
______________________________
SiteHound
http://www.firetrust.com/firetrustsitehound.html
This tool bar will help protect you from.
Over 4,000 fake bank and credit sites.
Tens of thousands of pornographic
and adult sites.
The never ending fake phishing sites.
Malicious sites, which can infect you
with spyware and adware if you visit
them.
Sites to download software which
may infect your computer with
spyware, a virus or adware
NOTE: This will slow only the initial startup of internet explorer. It doesn't have that effect on firefox.
___________________________________
Download and keep this updated and run weekly if you don't already have it.
spybot seach & destroy
Tutorial
___________________________________
Download and Install a HOSTS File
A Hosts file is a plain text file which prevents your computer from connecting to malware and spyware sites by redirecting the connection request to 127.0.0.1, which is your local address. If you use a proxy server, or if you are on AOL, be sure to read the special instructions.
You can download the MVPS Hosts File and see a HOSTS file tutorial here :
This website also contains useful tips, and links to other resources and utilities.
___________________________________
Make your Internet Explorer more secure
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click on the Security tab
3. Click the Internet icon so it becomes highlighted.
4. Click on Default Level and click Ok
5. Click on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialise and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
6. Next press the Apply button and then the OK to exit the Internet Properties page.
__________________________________________
Here's a site with great advise on how to AVOID malware. Much easier to do than removing it.
Safe and Happy Surfing.
Thanks so much Bob4! I really appreciate the help!
One last thing:
In my haste to tell you you were clear. I forgot to mention Service Pack 1.
It really needs to be updated to service pack 2.
Microsoft no longer has fixes or updates for service pack 1.
It's just not supported any longer.
Service pack 2 is loaded with security updates to help keep you safe .
I urge you to go to
http://www.microsoft.com/windowsxp/sp2/how.mspx
download and install service pack 2.
In my haste to tell you you were clear. I forgot to mention Service Pack 1.
It really needs to be updated to service pack 2.
Microsoft no longer has fixes or updates for service pack 1.
It's just not supported any longer.
Service pack 2 is loaded with security updates to help keep you safe .
I urge you to go to
http://www.microsoft.com/windowsxp/sp2/how.mspx
download and install service pack 2.
Blade81
Glad we could be of assistance.
This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.
You can help support this site from this link :
Donations For Malware Removal
Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.
You can help support this site from this link :
Donations For Malware Removal
Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.