well, it looks fine now, thanks, and do I need to remove combofix now?

Yes.

This will clear away any of the files and folders that were created by ComboFix.

Go to :
Start > Run then copy and paste the following highlighted text below and click OK.



When ComboFix receives such an instruction, it will do the following:

a) Deletes the following files/folders:
* ComboFix.exe
* %system%\swxcacls.exe
* %system%\swsc.exe
* %system%\VFind.exe
* %system%\moveex.exe
* %system%\swreg.exe
* %systemroot%\catchme.exe
* \ComboFix
* \Qoobox
* \VundoFix Backups
* \Deckard
* \_OTMoveIt
* %systemroot%\erdnt\subs
b) Resets the clock settings.
c) Hides file extensions
d) Hides System/Hidden files
e) Clears System Restore cache and create new Restore point

As you can see, when using the uninstall switch there is no need to instruct the user to rehide system files/folders, nor flush the System Restore.

**Note**

As listed above, the %systemroot%\erdnt\subs will be deleted as well.

Be absolutely certain the thread is resolved before using /u. Should the system go 'south' for some reason, you'll no longer have the erunt backup to invoke.
__________________

Hello again,

Just following up here. Do you still require assistance in removing your malware infections or can I put this thread to bed? Please advise us as to the situation.

Regards,

Crush
PCHF Security Team