Hello jm47.
Open HijackThis and select Do a system scan only then place a check mark next to:
O18 - Protocol: bwz0s - {C657A8A3-7047-4C11-ABD9-B4D5C724B633} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
<- Place a check next to all of the 018 entries. They are unnecessary and will not effect anything by removing them.
----------
Disable Spybot's TeaTimer
While TeaTimer is an excellent tool for the prevention of spyware, it can also interfere with HijackThis fixes. Please disable TeaTimer for now until you are clean.
1. Right click Spybot in the System Tray (looks like a calendar with a padlock symbol). Choose
Exit Spybot S&D Resident
2. Run
Spybot S&D
3. Go to the
Mode menu, and make sure
Advanced Mode is selected.
4. On the left hand side, choose
Tools >
Resident
uncheck
Resident TeaTimer and
OK any prompt and
Restart your computer.
Note: If TeaTimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.
If TeaTimer will not turn off then uninstall Spybot until we are done cleaning.
----------
Download
CCleaner Slim and save it to your Desktop.
When the file has been saved, go to your Desktop and double-click on
ccsetupxxx_slim.exe
Follow the prompts to install the program.
Complete the installation then:
- Double-click the CCleaner shortcut on the desktop to start the program.
- Click on the Options block on the left, then choose Cookies.
- Under Cookies to Delete, highlight any cookies you would like to retain permanently
- Click the right arrow > to move them to the Cookies to Keep window.
- Go into Options > Advanced uncheck Only delete files in Windows Temp folders older than 48 hours
- Click Cleaner on the left then Run Cleaner on the right to run the program.
- Important: Make sure that ALL browser windows are closed before selecting Run Cleaner
- Caution: It is not recommended that you use the 'Registry' feature unless you are very familiar with the registry.
- Exit CCleaner after it has completed its process.
----------
Download
Malwarebytes' Anti-Malware (MBAM) - Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to the following:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
- Then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select Perform quick scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy and Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
----------
Now run a new HijackThis scan and post the log along with the MBAM log.