swatkat
Technomancer
Download Webroot Spysweeper and CCleaner and install them.
1] Run HijackThis and click "Do only a System scan". Then select these entries:-
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = *searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = *searchmiracle.com/sp.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = *searchmiracle.com/sp.php
Then close all other open programs except HijackThis, and click "Fix Checked" in HijackThis.
2] Exit from HijackThis. Yes, delete these files and folders:-
C:\WINNT\EliteSideBar
elitefaw32.exe
Delete these files if you find it:-
C:\protas.exe
c:\winnt\protector.exe
And go this folder c:\documents and settings\rohan\favorites\ and delete all folders and files inside the Favorites folder. (Do not delete the Favorites folder!)
3] Run WebRoot SpySweeper, Click "Options" button and then click "Sweep Options" tab, and here select all the Hard Disk Partitions.
Select these items in the "What to Sweep" Options box:-
"Sweep Memory"
"Sweep Registry"
"Sweep All User Accounts"
"Do Not Sweep System Restore Folders"
In the "Where to Sweep" Options box, select "Sweep All Folders on selected drives".
Then click "Sweep Now" button in left pane, and click "Start". After the scan, remove all the malwares it may find.
Run CCleaner, click "Options" button and here go to "Settings" tab and uncheck the option "Only delete files in Windows Temp folder older than 48 hours". Click OK to exit from the Options. Finally click "Run Cleaner".
4] Restart the System. Run HijackThis again and post a fresh log.
Did you run MS AntiSpyware before fixing with HijackThis? Also, did WebRoot Spysweeper found anything? IS the Kernel32.dll is alright now (Is Norton detecting any virus)?
1] Run HijackThis and click "Do only a System scan". Then select these entries:-
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = *searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = *searchmiracle.com/sp.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = *searchmiracle.com/sp.php
Then close all other open programs except HijackThis, and click "Fix Checked" in HijackThis.
2] Exit from HijackThis. Yes, delete these files and folders:-
C:\WINNT\EliteSideBar
elitefaw32.exe
Delete these files if you find it:-
C:\protas.exe
c:\winnt\protector.exe
And go this folder c:\documents and settings\rohan\favorites\ and delete all folders and files inside the Favorites folder. (Do not delete the Favorites folder!)
3] Run WebRoot SpySweeper, Click "Options" button and then click "Sweep Options" tab, and here select all the Hard Disk Partitions.
Select these items in the "What to Sweep" Options box:-
"Sweep Memory"
"Sweep Registry"
"Sweep All User Accounts"
"Do Not Sweep System Restore Folders"
In the "Where to Sweep" Options box, select "Sweep All Folders on selected drives".
Then click "Sweep Now" button in left pane, and click "Start". After the scan, remove all the malwares it may find.
Run CCleaner, click "Options" button and here go to "Settings" tab and uncheck the option "Only delete files in Windows Temp folder older than 48 hours". Click OK to exit from the Options. Finally click "Run Cleaner".
4] Restart the System. Run HijackThis again and post a fresh log.
Did you run MS AntiSpyware before fixing with HijackThis? Also, did WebRoot Spysweeper found anything? IS the Kernel32.dll is alright now (Is Norton detecting any virus)?
Did a norton av scan with latest updated virus definitions. It shows the system as completely clean. One file still in quarantine kernel32.dll (iam still thinking over wether to do do what you told me 
scared shitless 
as to what might happen if things go wrong)
yes, thats quite conviniet for them isn't it.
