If you do not follow these steps before posting your log, be aware that you will be instructed to do this anyway.

Now create a new system restore point in case we need to restore the PC to a previous date.

Download SysRestorePoint to your desktop and unzip it to it's own folder.
  • Double click SysRestorePoint.exe so that we can make a new system restore point.
  • A box will pop up after it has made a new point, usually after a few seconds. Close that window and exit the program.
Next

Let us make a full registry backup with ERUNT as another safety net (use this to restore the registry if needed) :

Backup Your Registry with ERUNT
  • Please use the following link and scroll down to ERUNT and download it.
    http://aumha.org/freeware/freeware.php
  • For version with the Installer:
    Use the setup program to install ERUNT on your computer
  • For the zipped version:
    Unzip all the files into a folder of your choice.
Click Erunt.exe to backup your registry to the folder of your choice.

Note: to restore your registry, go to the folder and start ERDNT.exe


Hijack This logs are easier to work with, when Ad-Aware has cleaned up files that are already in detection; and indeed, it is best not to go through manual removal steps, if the up-to-date Ad-Aware can do it automatically.

Before posting a "Hijack This" Log, you must run a scan with the latest version of Ad-Aware , and ensure that you have the latest definition file by performing a webupdate once Ad-Aware is loaded.

Hijack This and Posting Your Logs.
    1. Download this free tool called HijackThis from Trend Micro
    http://download.bleepingcomputer.com/hijac.../HJTInstall.exe

    2. Doubleclick the HJTInstall.exe to start it.
    By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.

    3. HijackThis will open after install. Press the Scan button below.
    This will start the scan and open a log.

    4. *Copy the contents of the logfile and paste the results into a "New Topic". in the Hijack This Logs forum

    5. Next Click the "Post New Topic" Button

    Note: Most of what Hijack This lists will be harmless or even essential, do not fix anything yet. Someone will be along to tell you what steps to take after you post the contents of the scan results.

    6. To post your Ad-Aware scan log: In the attachments area navigate to "C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Logs" (XP) or "C:\ProgramData\Lavasoft\Ad-Aware\logs" (Vista) and select the most recent log. Then click the green upload button

Any files that may be deleted during the course of cleaning up with Hijack This and the expert advice, should be saved (if possible), and sent to the Anti-Virus / Anti-Spyware companies, so they may be placed into detection. To submit files to Lavasoft Research, please visit http://www.lavasoft.com/support/securityce...submit_file.php

*Additional help if needed: How to copy and paste

To copy and paste from the text file that opened:

In the Notepad file that opens, Go to *Edit* at the top and choose *select all* from the drop down menu
That will highlight all of the text. Do one of the following to copy and paste:

Method 1. Press *Ctrl* + *C* on your keyboard
That will put the contents into your clipboard (which you can't see)
Now open your message to paste in the contents: On your keyboard press *Ctrl* + *v*
That will paste in the log you copied.

OR

Method 2. When you have all the text highlighted, use your mouse to *rightclick* and choose *copy*. This will copy the contents to your clipboard. Go to the area you want to paste in the text and rightclick with the mouse and choose *paste*. You should now see the text in the area you chose to paste it to.


Please do NOT send Private Messages to Staff or helpers to request assistance! We do not give a personal support via PM nor by email, AIM, ICQ, IRC! The way to request help is to post a NEW TOPIC in the appropriate forum.

Unsolicited PM's or emails sent to staff and/or helpers will NOT be answered. Replies are posted to topics in the forum instead.

Please be patient. Do not post multiple times for the same problem and do not bump your posts. It is important to keep 0 replies so the Volunteer Security Advisors can easily see who has not yet been helped. If you have not received help after 1 week, open a new topic with a link to your original post.

Edit 02 July 2008 by LS CalamityJane: Added directions for copy + paste
Edit 25 October 2008 by Casey_boy: Added log path for Vista
Edit 20 Aug 2009 by visitor: Added "no multiple posts, no bumping" info