Hello again
Open HijackThis and click on 'Do a System Scan Only'. Check the following entries
(If they still exist, make sure you do not miss any)
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O15 - Trusted Zone: http://mn4.runescape.com
O15 - Trusted Zone: www.runescape.com
Please remember to close all other windows, including browsers then click Fix checked.
===========
Open notepad and copy/paste the text in the quotebox below into it:
Quote:
File::
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report1411d848\Report.cab
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report17fa5ac0\Report.cab
C:\Users\AllUsers\Microsoft\Windows\WER\ReportArchive\Report1411d848\Report.cab
C:\Users\AllUsers\Microsoft\Windows\WER\ReportArchive\Report17fa5ac0\Report.cab
Folder::
C:\ProgramData\Viewpoint
|
Save this as
CFscript
Refering to the picture above, drag CFscript into ComboFix.exe
Follow the prompts, and post the resulting log,
C:\ComboFix.txt
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
=========
Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.
=========
Logs Required
C:\Combofix.txt
Hijackthis Log