Boot in Safe Mode.
Switch System restore OFF,
In Windows Explorer, turn on "show all files and folders, including hidden and system".
Press Ctrl/Alt/Del simultaneously, select Taskmanager/Processes, select the process (if there), click "End Process" for:
IBISCont.exe
winstall.exe
Next, try to UNinstall anything to do with (not delete yet!):
D:\bin\IBISCont.exe
Next, run a HJT scan and place a tick-mark in the little square before (if still there):
...................................................................................................
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.uk R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dll
O4 - HKLM\..\Run: [BT Broadband] D:\bin\IBISCont.exe
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
...................................................................................................
Now click on the Fix Checked button in HJT.
When done, from between the above dotted lines, delete the highlighted bold files.
When a \directory-name\ is bold, delete everything in it, including that directory itself.
Delete all files and directories from: C:\Documents and Settings\[username]\Local Settings\Temp
Repeat this for ALL [usernames].
Delete all files and directories from: C:\WINDOWS\Temp (except files dated from the date you created them).
Boot normal. When all OK, switch System Restore back on.
