Please open Notepad (Start > Run, in the Open field type: notepad)
Click: OK
Copy/ paste the blue text below to Notepad:
File::
C:\Program Files\toolbar.exe
C:\WINDOWS\unvise32.exe
C:\WINDOWS\system32\gebcc.dll.vir
C:\WINDOWS\system32\pmnll.dll.vir
C:\WINDOWS\system32\xxyabxv.dll.vir
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{14B090B0-3621-4391-97BF-B4EE4AB38334}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{34F4A050-C52E-412F-AC5A-2D60066134CD}]
[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Srro]
Save as
CFScript.txt <-Important!!
Change the Save as type to: All Files
Save it to the Desktop.
Referring to the screenshot above, drag
CFScript.txt >>> into
>>> ComboFix.exe
ComboFix runs a scan on your system, and may reboot when it finishes. This is normal.
CAUTION: Do not mouse-click ComboFix while it is running. It may cause it to stall.
When finished, a log is produced:
ComboFix.txt
~~~~
Please run
HijackThis once again to obtain a new log.
~~~~
Please provide the contents of the new
ComboFix.txt in your next reply, as well as the new
HijackThis log.