Ried

Hello ohno and welcome to TSF,

I'll be honest--this can be a particularly nasty infection to get rid of.

Download Combofix and save it to your desktop.


**Note: It is important that it is saved directly to your desktop**
-------------------------------------

Disconnect from the internet.

--------------------------------------------------------------------

Go to Start>Run then copy/paste the following red text into the Run box then click OK

"%userprofile%\desktop\combofix.exe" /wow-drv WinWMServiceNow

When finished, it shall produce a log for you. I'll need that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

-----------------------------------------------------------------------

Run a new scan with HijackThis and save the log.

-----------------------------------------------------------------------

Please include the following in your next reply:

C:\ComboFix.txt
New HijackThis log