Replies

Nothing should be in from of the Microsoft address if it is it is hijacked!

Please do the following to try to correct the problem:
Step 1: Click on "Start", then "Run".
Step 2: In the box provided, type "MSCONFIG" without the quotes.
Step 3: Click "OK".
Step 4: Click on the STARTUP tab.
Step 5: Remove the checkmarks from all items except the following:
Anything starting with cc and Nav
Anything which sounds like your Internet Service Provider
ScanRegistry ,Systray,KBD, PCHSchd.exe, PS2,Recguard ,Rundll32.dll , USBMMKBD ,Keyboard Manager,Motive Monitor,HPScanPatch(Only keep if you have an HPUSBScanner), TaskMonitor, PCHealth, ssdpsrv, Mgavrtclexe(twice), StateMgr, LoadPowerProfile , hidserv , Delay or Delayrun, HKcmd, LT Daemon, Msg32 and Msgloop .
NOTE : Do not worry if some programs(entries) are not present at start up as it depends on the make and model of the PC .
Step 6: Click "APPLY"
Step 7: Click "OK"
Step 8: The Compaq will prompt you that in order for the changes to take effect you must restart the system. Click the option to have the computer restart now. When the system restarts, please click on the " Do not remind me again " checkbox and click OK.
Adam R: Please go ahead and perform these steps . Later check if you have the same errors again at start up.
Adam R: Please take your time
Adam R: , if you still have those errors after completing these steps, you may need to download the missing dll files from the link below :

http://www.dll-files.com/dllindex/index.shtml
NOTE: The URL above will take you to a non ** website. ** does not control and is not responsible for information outside of the HP website.

THIS IS WHAT THE INFECTION LOOKS LIKE IN STARTUP

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\sftzv.dll/sp.html#96676
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://sftzv.dll/index.html#96676
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://sftzv.dll/index.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\sftzv.dll/sp.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://sftzv.dll/index.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\sftzv.dll/sp.html#96676