Ok, instructions executed and logs as requested. It was not clear if when SDFix rebooted if you wanted it to come back up in Safe mode - it did not, I just let it reboot by itself therefore the conclusion of SDFix and the HJT run was not in Safe mode. Please let me know if this was incorrect. Also, for you information, there has been no symptomatic change - IE still misbehaves as previously described and the machine reboots if you try to search the registry.

continued thanks.

norm

Attached Files

	SDFix report.txt (2.8 KB, 2 views)
	hijackthis4.log (9.6 KB, 0 views)

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.

1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Open *notepad* and copy/paste the text in the quotebox below into it:

Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.






Refering to the picture above, drag CFScript.txt into ComboFix.exe
Restart your computer.
When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh sdfix log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

thanks,

v

As requested. Note aberrant behavior still present.

norm

Attached Files

	combofix.txt (13.9 KB, 1 views)
	SDFix report.txt (2.5 KB, 1 views)

follow the same steps in post 10 for the following file:

C:\WINDOWS\SoftwareDistribution\Download\cf7ced0e7 0c80a1e476f1abf49afecb1\BITD.tmp

reboot, and post a new sdfix....

thanks,

v

Apologies, but I don't understand the context of this last instruction. You refer to following the steps in post 10 with the file as specified. This most recent post of yours is #10 - what steps am I supposed to follow and what do I do with this file path you provided?

norm

my bad, post 8, and what you want to save as cfscript.txt is below:

thanks,

v