tetonbob

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

1. P2P - I see you have P2P software (BitTorrent ) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.
   
   Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
   
   References for the risk of these programs are here,
   here and here.
   
   I would strongly recommend that you uninstall this. You can do so via Control Panel >> Add or Remove Programs.
   
   ---------------------------------------------------------------------------------------------
   
2. I see you have installed Eusing Free Registry Cleaner
   
   We do not recommend the use of registry cleaners. Our colleague miekiemoes has an excellent writeup here
   
   Another excellent article by Bill Castner is located here.
   
   ---------------------------------------------------------------------------------------------
   
   
   
3. Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add or Remove Programs) if they exist:
   
   iMeshBar
   
   Here's why:
   
   http://www.bleepingcomputer.com/unin.../iMeshBar.html
   
   Java(TM) 6 Update 5
   
   This is outdated, and a security risk by having it installed still. Unfortunately, Java does not uninstall previous version when you update, nor tell you that you should. It also takes a lot of space on disk.
   
   Leave Java(TM) 6 Update 7 alone, as it is the most recent.
   
   ---------------------------------------------------------------------------------------------
   
4. Open notepad and copy/paste the text in the quotebox below into it:
   
   
   Quote:

   File:: C:\WINDOWS\system32\ulbhvnrv.ini Registry:: [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=""

   Save this as CFScript.txt
   
   
   
   
   Referring to the picture above, drag CFScript.txt into ComboFix.exe
   
   
   
5. Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
   
6. When finished, it shall produce a log for you. Post that log in your next reply
   
   Note:
   Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
   
   ---------------------------------------------------------------------------------------------
   
7. Re-establish an internet connection.
   
8. 
   Install this FREE AntiVirus program, update it, and run a full system scan.
   
   Avira AntiVir Personal
   
   Here is a tutorial on it's setup and use:
   
   http://www.techsupportforum.com/cont...ticles/64.html
   
   When the scan is complete, click on the Report button. A log file will open. Please post that in your next reply.
   
   Do not install more than one antivirus program because they will conflict with each other. It is imperative that you update your antivirus software at least once a week (even more if you wish). If you do not update your antivirus software then it will not be able to catch new malware that may have come out.
   
   ---------------------------------------------------------------------------------------------
   
9. Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.
   
   ---------------------------------------------------------------------------------------------