Before we start, you need to place HijackThis in a folder of its own as I've described earlier (see the quotation box below). That's very important. HijackThis cannot function properly if you don't.
................... your HijackThis log. It needs to be put in a folder of its own for it to function properly though. So, right click on an empty space on the desktop and go to New>Folder to create a new folder. Name it HijackThis and then drag and drop the HijackThis.exe into this folder.
============================================
Make sure that Windows Defender and the Norton Script Blocking are still disabled, as posted earlier.
============================================
Now, run HijackThis. Close all windows and browsers except HijackThis.
Go to Config > Misc tools
Click on Delete a File On Reboot
Click once on the file below to select it:
C:\Program Files\WinAntiVirus Pro 2006\winav.exe
Click on the Back button to exit Process Manager
Now, back at the main screen of HijackThis, click on Scan and put a check in front of the following
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [WinAntiVirusPro2006] C:\Program Files\WinAntiVirus Pro 2006\winav.exe /min
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} - http://dm.screensavers.com/dm/installer ... taller.cab
O23 - Service: Firewall service (FWSvc) - Unknown owner - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe (file missing)
Make sure that there is no other window/browser open, except HijackThis. Then click on "fix checked". Exit HijackThis.
============================================
- Copy the contents of the Quote Box below to Notepad.. Must be notepad, otherwise it will not work.
- Name the file as fix.reg
- Change the Save as Type to All Files
- and Save it on the desktop
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinAntiVirusPro2006"=-
Make sure there is no line before REGEDIT4
Make sure there is one line at the end
Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
============================================
Use Windows Explorer to navigate to the following folder and delete it, if present:
C:\Program Files\WinAntiVirus Pro 2006\ <-- delete this entire folder.
============================================
Open Notepad, copy and paste the following text (in bold) into the new Notepad window.
Save it to your Desktop, as type "all files", as fixservice.bat:
sc stop FWSvc
sc delete FWSvc
del fixservice.bat
Doubleclick fixservice.bat on your Desktop.
A window will pop up and close. This is normal.
============================================
Then, reboot your computer (it's important). Scan with HijackThis and post the new HiJackThis log please.