First order of business: Go to Add/Remove programs, find new.net there and remove it and reboot.

Then print these instructions or have them in a convenient Notepad file. Do NOT leave HijackThis in the temporary folder it is in. Copy or move it to a permanent folder of its own in a convenient location. Do not put it directly on the desktop either. Have Show Hidden Files enabled in Folder Options > View (available through the Control Panel or any Explorer Tools menu).

Then:

1 -- Restart in Safe Mode: http://service1.symantec.com/SUPPOR...001052409420406

2 -- In Safe Mode, run HijackThis and check and "fix" the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mypoiskovik.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://mypoiskovik.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mypoiskovik.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://mypoiskovik.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://mypoiskovik.com/index.htm

O4 - HKLM\..\Run: [Video Process] sysconf.exe

O4 - HKCU\..\Run: [dllhelp] c:\windows\dllhelp.exe

2 -- Go to Start > Run, enter cmd and a "cmd shell" will open. Carefully type and enter the following commands:

del C:\WINDOWS\System32\sysconf.exe
del C:\windows\dllhelp.exe

3 -- Reboot and post a new Scanlog.

Ja sam se ovako resio napasti, ako je jos neko u problemu - pokusajte!