Do a HijackThis scan & place a check next to these items and select "Fix checked":
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,AutoConfigURL = www.foxfire.com
F2 - REG:system.ini: UserInit=C:\WINNT\SYSTEM32\Userinit.exe,userinit.e xe
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
* * * * * *
1. Download this file using either of these links
http://download.bleepingcomputer.com/sUBs/combofix.exe
http://www.techsupportforum.com/sectools/combofix.exe
2. Double click on combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log & a fresh HJT log in your next reply
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
__________________
Question - what have you done for the community today?