Do you have a Windows XP installation CD?
If you do, use the Windows System File checker tool to restore all missing or corrupted Windows files.
Start -> Run and type in
Then, in the black box that appears (DOS emulator), type
Make sure that you leave a space between the sfc and the /.
Windows will then check that all operating system files are in place and original.
If you do not, use Windows System Restore to return your system state to a working condition by choosing a system restore date from before you deleted anything or ran Autoruns.
You access it by:
Start/programs/accessories/system tools/system restore
You will then have to address the malware issue on your computer.
Run The Windows OneCare Free Scan (on-line scan)
To run the Windows One Care Free Scan
Go to Windows Live Onecare Free Scan site using Internet Explorer.
It will say "Get a free PC safety scan"http://safety.live.com/site/en-us/default.htm
Make sure you click "Full Service Scan"
in the middle of the page and not the "Try It Now Free" on the right side.
Allow it to download an Active X component.
Choose "Complete Scan" in the window that opens
Do not click on anything else that offers you a free trial or to sign up if you live in the US.
Allow it to scan - it may take quite, maybe two hours or so depending on how big your hard drive is and how fragmented your registry and drive are.
After completing the Windows OneCare Free Scan run both Adaware and Spybot Search and Destroy from safe mode, updating each program’s malware definitions before you scan and allowing both to fix what they find.
If you do not already have these freeware aps installed on your computer, you can get them at the following sites:
*AdAware SE: http://www.majorgeeks.com/download506.html
*Spybot S&D: http://www.safer-networking.org/en/index.html
Following that that I suggest you post a “HijackThis” log for expert assistance with your malware infection.
Read the pinned post in our “HijackThis” forum,
here http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ Carefully read and follow all directions explicitly.
Following instructions create a HJT log, and POST THE HJT LOG YOU CREATED IN OUR HJT FORUM – not in this forum
, at this link
Include the specs for your computer (ie, processor, amount of RAM, brand or motherboard, etc, and briefly describe the problem you are experiencing.)Unless you are expert at editing the registry, Do not use the Hijack This program to try to fix anything by yourself as even what may seem to be a small mistake can render your operating system inoperable.
Some files when in the correct folder for them may be fine while in another may be malware hiding.
A member of our expert HJT Team will analyze your log, make recommendations and offer assistance, walking you through the complete repair process.
It may take a short period of time to get a response to the log you posted because the members of our HJT Team are kept very busy. Posting your Hijack This log anywhere but in the Hijack This Logs and Analysis forum will delay their response as it will require a moderator to move the log there before the HJT Team will see it and it will fall behind other logs posted after yours was posted, so be sure to post it in the proper forum.Please
be patient as this team is manned by volunteers. They will help you in order received as soon as possible.NOTE
Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make your computer to be different than displayed in the log you posted and therefore make your log inaccurate).
The first criteria the HJT Team has when looking for logs that need replies are posts showing 0 replies
. If you make an additional post, it will show as having had 1 reply
A team member, looking for a new log that requires help might well assume another HJT Team member is already assisting you and might not open the thread to respond.
So, post your HJT Log in our HJT Forum (not here in this forum) and wait for a response from a HJT team member.
After you post your log, please do not make any changes to your computer. Discontinue trying to delete anything with any program as changes will make your HJT log obsolete and waste valuable time spent by our HJT experts analyzing the log made innacurate by changes and therefore their plan formulated to address the problems will also be obsolete.
If after 5 days you still have gotten no response, then post a re-request and a link to your HJT log HERE. http://www.bleepingcomputer.com/forums/topic14717.htmlMake sure you post your HJT log in the HJT forum, not here, because if you post it here in this forum the response from our HJT Team will be delayed because the post will have to be moved before they see it and it will fall in line behind many others posted that same day.