Tomk
- Please open HijackThis and run Do a system scan only
- Check the boxes next to ONLY the entries listed below(if present):
- R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - (no file)
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O16 - DPF: {463ED66E-431B-11D2-ADB0-0080C83DA4EB} - https://w3s.webmoney.ru/WMAcceptor.dll
- R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
- Close all programs except for HijackThis.
- Click on Fix checked
- A box will pop up asking you if you wish to fix the selected items. Please choose YES.
- Once it has fixed them, please exit/close HijackThis.
Then please try shutting off your firewall. (Be sure to turn on Windows firewall) and see what happens.
Let me know.