Hi,
Please re-scan with HijackThis and put a checkmark against the following entries:
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {0C8C77AF-B97A-4FD3-89C0-44098F0CDE6B} - (no file)
O2 - BHO: (no name) - {7E156AAE-FA60-44A1-8E69-2E0E0030F1F6} - (no file)
O2 - BHO: (no name) - {B91C0269-E0E2-4C83-BCFF-131693EB3314} - (no file)
O20 - Winlogon Notify: efcywxWn - efcywxWn.dll (file missing)
O20 - Winlogon Notify: WinCtrl32 - WinCtrl32.dll (file missing)
O23 - Service: LSCLFE - Unknown owner - C:\DOCUME~1\Owner\LOCALS~1\Temp\LSCLFE.exe (file missing)
It may be helpful to know that when you put an item in your Trusted Zone, it has pretty much full access to your computer... Are you sure you trust this site to that degree?? If you're not sure, and/or you do not need these in your trusted zone to facilitate access, or you did not knowingly permit this access yourself, then please check the following O15 entries too:
O15 - Trusted Zone: http://*.ameritrade.com
O15 - Trusted Zone: http://www.cbs.com
O15 - Trusted Zone: http://visitor.constantcontact.com
O15 - Trusted Zone: http://www.evite.com
O15 - Trusted Zone: http://dynamic.abc.go.com
O15 - Trusted Zone: www.seek.com.au
O15 - Trusted Zone: http://*.turbotax.com
Close all browsers and windows other than HijackThis and click on "fix checked".
======================================
Click
here to download Combofix. Do not run it yet.
* IMPORTANT !!! Place combofix.exe on your Desktop
======================================
Go to Microsoft's website =>
http://support.microsoft.com/kb/310994
Select the download that's appropriate for your Operating System
Download the file & save it as it's originally named, next to ComboFix.exe.
Now close all open windows and programs, including all anti virus and anti malware programs so they do not interfere with the running of ComboFix.- Drag the setup package onto ComboFix.exe and drop it.
- Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.
- At the next prompt, click 'Yes' to run the full ComboFix scan.
- When the tool is finished, it will produce a report for you.
Please post the
C:\ComboFix.txt along with a
new HijackThis log for further review.