Example: http://aumha.net/viewtopic.php?t=31586

NB: Please do NOT use these instructions (or instructions in any other forum
thread) on another computer system. You can seriously damage your system by
following such instructions without expert, guided assistance. You assuredly
will make a cleanup of your system more difficult.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


PA Bear wrote:
> The machine is *seriously* infected with hijackware!
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis
> log to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
> expert analysis, not here.**
>
> If the procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>
> lrh381b2 wrote:
>> I am working on my friend's computer that got lots of pop-ups, he had 15
>> viruses. I removed them using Avast! Anti-virus. In quarantine, there
>> were
>> over 400 infected files, which I deleted. When I go to "My Computer",
>> there
>> is a red "X" where the hard drive picture should be, beside "Local Disk
>> (C:). He still has occasional pop-ups. The pop-up blocker is on. I ran
>> Windows Defender and Spybot S&D and removed multiple spyware
>> applications.
>> Any ideas? Thanks!