It replaced my desktop wallpaper, wouldn't let me open task manager, and had a tray icon and pop up messages wanting me to download software.
After running Spybot, Adware, and MalwareBytes, those issues are gone. Now links within any webpage will redirect to some advertising page.
The normal link like foxnews or something turns into thefeedonline or livefeedinc followed by a bunch of gibberish.
I have the HijackThis, Malwarebytes, and SuperAntiSpyware log files attached. SuperAntiSpyware removed some things that the others did not.
I've narrowed it down to it being a chkdisk.dll issue.
If I use HijackThis to get rid of several entries of chkdisk.dll and two others that seem to be related, the issues go away. That is, until I restart my computer, and these files are back up again.
O4 - HKCU\..\Run: [autochk] rundll32.exe C:\DOCUME~1\KATEWI~1\protect.dll,_IWMPEvents@0
O4 - HKLM\..\Run: [autochk] rundll32.exe C:\WINDOWS\system32\autochk.dll,_IWMPEvents@0
O4 - S-1-5-18 Startup: ChkDisk.dll (User 'SYSTEM')
O4 - S-1-5-18 Startup: ChkDisk.lnk = ? (User 'SYSTEM')
O4 - .DEFAULT Startup: ChkDisk.dll (User 'Default user')
O4 - .DEFAULT Startup: ChkDisk.lnk = ? (User 'Default user')
O4 - Startup: ChkDisk.dll
O4 - Startup: ChkDisk.lnk = ?
Those are the entries I get rid of and solves the issue, but they're back as soon as I shut down and reboot.
I've been searching online for similar issues, and all other threads time out or get closed and I never find the answer.
I tried using msconfig to block those .dlls, but they keep coming back.
I would really like some help with this please!
Edited by GreaseMonkeySRT, 20 September 2009 - 04:05 PM.