Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Starware Search Results
Open Windows Explorer and remove this folder :
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: {0665f311-21ae-705b-1944-85553b017630} - {036710b3-5558-4491-b507-ea12113f5660} - C:\WINDOWS\system32\jklfkqxw.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [3cb30a30] rundll32.exe "C:\WINDOWS\system32\qhhcbubl.dll",b
O4 - HKCU\..\Run: [rdpdd] C:\WINDOWS\System32\rdpdd.exe
O4 - HKCU\..\Run: [196_150_ni] C:\WINDOWS\System32\196_150_ni.exe
O4 - HKCU\..\Run: [197_150_ni_2] C:\WINDOWS\System32\197_150_ni_2.exe
O4 - HKCU\..\Run: [usrdpa] "C:\WINDOWS\System32\usrdpa.exe"
O4 - HKCU\..\Run: [cabinet] "C:\WINDOWS\system32\cabinet.exe"
O4 - HKCU\..\Run: [odbcjt32] "C:\WINDOWS\system32\odbcjt32.exe"
O23 - Service: cdosys - Unknown owner - C:\WINDOWS\System32\cdosys.exe (file missing)

====================

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad* and copy/paste the text in the quotebox below into it:
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.


Refering to the picture above, drag CFScript.txt into ComboFix.exe
Restart your computer.
When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

Sorry it takes so long to reply. I don't have possession of the computer with the problem so I have to schedule access to it. Thank you for your help and patience.

Attached Files

	log.txt (8.8 KB, 1 views)
	hijackthis.log (8.5 KB, 1 views)

This should finish the cleanup.


Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O20 - Winlogon Notify: nnnoopn - nnnoopn.dll (file missing)
O24 - Desktop Component 0: (no name) - http://www.christnotes.org/images/topbackground.gif

=======================

Open *notepad* and copy/paste the text in the quotebox below into it:
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.


Refering to the picture above, drag CFScript.txt into ComboFix.exe
Restart your computer.
When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*