Well, there's the little bugger.
Run Gmer again. When you see the entry, highlighted in
red
Service C:\WINDOWS\system32\mssync20.sys (*** hidden *** ) [AUTO] mssync2020
Right click on it & have Gmer delete the service.
Reboot immediately.
Upon restarting Windows, locate the file -
C:\WINDOWS\system32\mssync20.sys
Rename it to
mssync20.sys.ren
Also look for any other file that has a similar name - mssync20****
If found, rename all of them
Then send me samples of the file to this
webpage
__________________
Question - what have you done for the community today?