Just so you know, what I'm looking at is the snapshot section of the CF log. See how the exe files are removed (marked with a minus sign) at one...
I suspect a file infector onboard and feel we might be fighting a losing battle. Lets check. Please do an online scan with Kaspersky Online...
Believe it or not, from what I can make sense of in the Filemon log, it appears that opera.exe is resposible for the creation of those folders....
Restart once again. If you get the same behavior, press Ctrl+Alt+Del to open the Task Manager and see if explorer.exe is running. If not, click...
Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as; Filename:...
Glad to hear it. You're very welcome! Geri has posted some very helpful information and recommendations regarding future protection in the...
I'm sorry. I just realized I told you to copy user32.dll instead of userinit.exe :o Navigate to C:\WINDOWS\ServicePackFiles\i386, locate then...
Excellent! Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will...
Right click and copy C:\WINDOWS\ServicePackFiles\i386\user32.dll then paste it into C:\Windows\system32. Let me know if successful.
Looks good sniper. Uninstall ComboFix by clicking Start>Run then type combofix /u and hit Enter. Make sure you have an Internet Connection....
Please navigate to C:\WINDOWS\system32 and check for the existence of both userinit.exe and userinit.exe.old, then let me know what you find.
Highlight and copy the contents of the code box below. @echo off echo.>done.txt if exist C:\WINDOWS\system32\user32.dll echo user32...
Highlight and copy the contents of the code box below. @echo off echo Please wait echo.>done.txt ren...
Please download Malwarebytes' Anti-Malware (MBAM) from here or here and save the file to your desktop. Double click mbam-setup.exe to install...
Zip them up and send them to me by email. Use RE: smitRem in the subject line.
So, do you intend to follow through with my instructions?
You need to download the installation package for the Setup Disks for Floppy Boot Install from Microsoft so that we can use it to install the...
You might be better off uninstalling the program (from the Administrator account), then re-install it on your own account by right clicking the...
Please try to re-install AdwareAlert, then uninstall it once again via Programs and Features. Maybe it will be better removed. If not, we'll clean...
How did you 'delete it'? It should have been uninstalled via Programs And Features in the Control Panel. There are still a number of components of...
Separate names with a comma.
