Hello SteveLJ
Please do the following:
Disable Microsoft Windows Defender:
We need to disable your Microsoft Windows Defender Real-time Protection as it may interfere with the fixes that we need to make.
- Open Microsoft Windows Defender. Click Start, Programs, Windows Defender
- Click on Tools, General Settings.
- Under Real-time protection options, unselect the Turn on real-time protection check box
- Click Save
After all of the fixes are complete it is very important that you enable Real-time Protection again.
Please set your system to show all files;
please see here if you're unsure how to do this.
Scan with HijackThis. Place a check against each of the following:
O4 - HKCU\..\Run: [Njpasi] C:\WINDOWS\system32\?ttrib.exe
O4 - HKCU\..\Run: [Ncao] C:\Documents and Settings\PDennis\Application Data\osoa.exe
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://winfixer.com/pages/scanner/WFI.cab
Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.
Reboot into Safe Mode: please
see here if you are not sure how to do this.
Using Windows Explorer, locate the following files/folders, and delete them:
( if they exist)
C:\WINDOWS\system32\?ttrib.exe<=file (the ? is another character)
C:\Documents and Settings\PDennis\Application Data\osoa.exe<=file
Exit Explorer, and reboot as normal afterwards.
Now run this online scan using Internet Explorer:
Kaspersky Online Scanner from
http://www.kaspersky.com/virusscanner
Next Click on
Launch Kaspersky Online Scanner
You will be prompted to install an ActiveX component from Kaspersky, Click
Yes.
- The program will launch and then begin downloading the latest definition files:
- Once the files have been downloaded click on NEXT
- Now click on Scan Settings
- In the scan settings make that the following are selected:
- Scan using the following Anti-Virus database:
- Standard
- Scan Options:
- Scan Archives
- Scan Mail Bases
- Click OK
- Now under select a target to scan:
- Select My Computer
- This will program will start and scan your system.
- The scan will take a while so be patient and let it run.
- Once the scan is complete it will display if your system has been infected.
- Now click on the Save as Text button:
- Save the file to your desktop.
Copy and paste that information from Kapersky in your next post.
Post (reply) with a fresh HijackThis log and the information from Kapersky.