Thanks for the clarification. Logs as requested. Behavior unchanged. Look forward to your continued assistance.

best regards
norm

Attached Files

	combofix.txt (13.4 KB, 1 views)
	SDFix report.txt (2.5 KB, 1 views)

Please download the Killbox by Option^Explicit.

Note: In the event you already have Killbox, this is a new version that I need you to download.

• Save it to your desktop.
• Please double-click Killbox.exe to run it.
• Select:
  • Delete on Reboot
  • then Click on the All Files button.
• Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
  
  

C:\WINDOWS\SoftwareDistribution\Download\cf7ced0e7 0c80a1e476f1abf49afecb1\BITD.tmp

• Return to Killbox, go to the File menu, and choose Paste from Clipboard.
• Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

If your computer does not restart automatically, please restart it manually.

If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run Killbox, click here to download and run missingfilesetup.exe. Then try Killbox again.

Post a new SDFix log.

thanks,


v

Killbox downloaded and run without the need for missingfilesetup.exe.

I did indeed get a popup message: "PendingFileRenameOperations Registry Data has been Removed by External Process"

I clicked OK; machine had to be rebooted manually.

SDFix log attached.

norm

Attached Files

SDFix report.txt (2.6 KB, 1 views)

hmmm.....still there.....go to BitDefender Online Scanner - Free Online Virus Scan and run a free online scan using IE, and please post the results plus a new HJT log as well.

thanks,

v

Here they are. Note that at one point during the bitdefender scan I checked the box that said show all files scanned and then turned it off when I realized it was going to go into the log. So, sorry for all the "clean" entries, but the three reported viruses are at the top of the list.

thanks
norm

Attached Files

hijackthis5.log (10.0 KB, 2 views)

In addition to the results in the last post, I was looking into what some of the tools do that you have had me using. Upon scrutinizing post 14, I noticed that there was a space in the middle of the file path. I removed the space and re-ran killbox which now recognized the file and rebooted automatically. I then ran SDFix. Attached is the SDFix log. However, there has been no change to the system behavior.

norm

Attached Files

SDFix report.txt (2.4 KB, 1 views)