Ried

Hello,

Download KillBox http://www.greyknight17.com/spy/KillBox.exe.

Reboot into Safe Mode.

Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. For each of the following files below, check the box that says 'Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file - choose NO when it asks if you want to reboot):

C:\Documents and Settings\ErnieLai.ERNIE\ApplicationData\Sskcwrd.dl l
C:\Documents and Settings\Ernie Lai.ERNIE\Application Data\Sskknwrd.dll
C:\Documents and Settings\Ernie Lai.ERNIE\Application Data\Sskuknwrd.dll
C:\installer_MARKETING35.exe
C:\Program Files\Windows MediaPlayer\wmplayer.exe.tmp
C:\SSK3_B5 Verticlick8.exe
C:\WINDOWS\system32\npsfmd.exe
C:\WINDOWS\system32\npsfmdndw30103lib.dll
C:\WINDOWS\system32\WinStat11.dll

Using Windows Explorer, delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Documents and Settings\ErnieLai.ERNIE\ApplicationData
C:\installer_MARKETING35.exe
C:\Program Files\Windows MediaPlayer\wmplayer.exe.tmp--careful here, look at the full name and delete this exact file
C:\SSK3_B5 Verticlick8.exe
C:\WINDOWS\system32\npsfmd.exe
C:\WINDOWS\system32\npsfmdndw30103lib.dll
C:\WINDOWS\system32\WinStat11.dll

Reboot into Normal Mode. Run another scan with Panda ActiveScan and post those results here along with another HijackThis log.