www.perfectedsecurity.com

[davo]

hey People,

Now a few days ago my girlfriend got my laptop infected with a virus...so she went ahead following instruction and downloaded all the crap that they said you needed to fix it.

So I have spent AGES cleaning it up, my AVG and Antispyware has removed what appears to be the main parts affected I deleted a file which was said to be a trojan...sorry right now I can't remember what it was called. And I deleted an entry in the registry that appeared to set IE to run this virus everytime you start it.

i think it is all clear EXCEPT IE always gets diverted to www.perfectedsecurity.com when it starts up...the homepage is set to blank as always...I can't find ANY references on my laptop which now may cause this.

I have checked all the running processes and they seem to be all clear...I've hunted the registry for clues and nothing...

Now does ANYONE have any idea???

Thanks in advance

Davo

[GTO]

Hi, Davo. Welcome to the 2-Spyware.com forums!

Please download the HijackThis program, run a system scan and post your log here.

[davo]

I did run hijack this and managed to fix it myself by deleting a registry entry....pointing to a file c:\windows\system32\hpxxxx.tmp I'll post more when I'm at home as I can not remember exactly where the registry setting was at the moment

[davo]

this is the offending entry

O2 - BHO: Nothing - {7a932ed2-1737-4ab8-b84d-c71779958551} - C:\WINDOWS\system32\hp666A.tmp

[GTO]

Hi, davo.

That entry was responsible for redirecting you to malicious web sites. You are right. However, I also suggest running the smitRem tool in order to completely remove all the infection-related files.