Welcome to MalwareCrypt j4ever2074,
I will move this request to the MC HijackThis logs and Malware Removal forum, where malware removal work gets done.
Let's get a look at what all is on your system right now, then start some repairs.
As you mention having run ComboFix already, please post that C:\ComboFix.txt log in your next reply.
-----------
If the system is Vista/Windows7, when running any of the scan files we use, be sure to right click the file, then select "Run as administrator" to start the scan/tool.
And To make sure you have an accurate view of files there, make sure you can
View Hidden Files. Also uncheck "Hide Extensions for Known File Types"
To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs.
Here are some antivirus disable tips if needed.
-------
Click
here and download the installer for Gmer to your desktop, then click that file to run Gmer.
Once the opening scan finishes, click on
Scan (again, before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).
When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.
Note - If Gmer shows it has located infection once it's opening scan completes, do not click the Scan button. We don't want hidden malware settings to cause any problems. Instead, just click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.
-----------
Download
aswMBR ( 511KB ) to your desktop.
- Double click the aswMBR.exe icon to run it
- Decline a download of avast itself if offered
- If avast! antivirus is already installed, go to the dropdown next to AV engine: and select (none)
- Click the Scan button to start the scan
- On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
