First order of business: Go to Add/Remove programs, find there and remove it and reboot.

Then print these instructions or have them in a convenient Notepad file. Do NOT leave HijackThis in the temporary folder it is in. Copy or move it to a permanent folder of its own in a convenient location. Do not put it directly on the desktop either. Have Show Hidden Files enabled in Folder Options > View (available through the Control Panel or any Explorer Tools menu).


1 -- Restart in Safe Mode:

2 -- In Safe Mode, run HijackThis and check and "fix" the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

O4 - HKLM\..\Run: [Video Process] sysconf.exe

O4 - HKCU\..\Run: [dllhelp] c:\windows\dllhelp.exe

2 -- Go to Start > Run, enter cmd and a "cmd shell" will open. Carefully type and enter the following commands:

del C:\WINDOWS\System32\sysconf.exe
del C:\windows\dllhelp.exe

3 -- Reboot and post a new Scanlog.

Ja sam se ovako resio napasti, ako je jos neko u problemu - pokusajte!