Spydawn infected HJT

1. 
   
2. Once you have downloaded AVG anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
3. Select Change state" to inactivate 'Resident Shield' and 'Automatic Updates'
4. Right click on AVG AS in the system tray and uncheck "Start with Windows".
   Go to Start > Run and type: services.msc
5. Press "OK".
6. In Services, click the "Extended tab" and scroll down the list to find AVG anti-spyware guard.
7. When you find the guard service, double-click on it.
8. In the Properties Window > General Tab that opens, click the "Stop" button.
9. From the drop-down menu next to "Startup Type", click on "Manual".
10. Now click "Apply", then "OK" and close the Services window.
11. Once the setup is complete you will need run AVG AS and update the definition files.
12. On the main screen select the icon "Update" then select the "Update now" link.
13. Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
14. If you are having problems with the updater, manually update with the AVG AS Full database installer from here.
    
15. Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
16. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
17. Under "Reports"
18. Select "Automatically generate report after every scan"
19. Un-Select "Only if threats were found"
20. Close AVG Anti-Spyware, Do Not run a scan just yet. We will shortly.
    ***********************************************
    
    zb1

1. 
   
2. Once you have downloaded AVG anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
3. Select Change state" to inactivate 'Resident Shield' and 'Automatic Updates'
4. Right click on AVG AS in the system tray and uncheck "Start with Windows".
   Go to Start > Run and type: services.msc
5. Press "OK".
6. In Services, click the "Extended tab" and scroll down the list to find AVG anti-spyware guard.
7. When you find the guard service, double-click on it.
8. In the Properties Window > General Tab that opens, click the "Stop" button.
9. From the drop-down menu next to "Startup Type", click on "Manual".
10. Now click "Apply", then "OK" and close the Services window.
11. Once the setup is complete you will need run AVG AS and update the definition files.
12. On the main screen select the icon "Update" then select the "Update now" link.
13. Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
14. If you are having problems with the updater, manually update with the AVG AS Full database installer from here.
    
15. Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
16. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
17. Under "Reports"
18. Select "Automatically generate report after every scan"
19. Un-Select "Only if threats were found"
20. Close AVG Anti-Spyware, Do Not run a scan just yet. We will shortly.
    
    
    Double-click smitfraudfix.exe
    Select option #1 - Search by typing 1 and press " Enter"; a text file will appear, which lists infected files (if present).
    Please copy/paste the content of that report into your next reply.
    
    IMPORTANT: Do NOT run any other options until you are asked to do so!
    
    Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
    http://www.beyondlogic.org/consulting/proc...processutil.htm
    

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, a menu with options should appear;
• Select the first option, to run Windows in Safe Mode, then press "Enter".
• Choose your usual account.

• Quit Internet Explorer and quit any instances of Windows Explorer.
• Click Start, click Control Panel, and then double-click Internet Options.
• On the General tab, click Delete Files under Temporary Internet Files.
• In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
• On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
• Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
• Click OK.

• While in Safe Mode, launch AVG Anti-Spyware by double-clicking the icon on your desktop.
• Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
• AVG AS will now begin the scanning process, be patient this may take a little time.
• Once the scan is complete do the following:
  
• If you have any infections you will prompted, then select "Apply all actions"
• Next select the "Reports" icon at the top.
• Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
• Close AVG AS and reboot your system back into Normal Mode.

It appears to be gone now.  No more flashin icon.  Am I clean?  Thanks

• Download the latest version of Java Runtime Environment (JRE) 6.
• Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.