Hello.
We can't remove the malware just yet because Spybot will interfere. You can install it back once we are done.
Go to Start > Control Panel > Add/Remove Programs and remove the following programs.
Please download the OTMoveIt by OldTimer.
Please post the OTMoveIt log.
We can't remove the malware just yet because Spybot will interfere. You can install it back once we are done.
Go to Start > Control Panel > Add/Remove Programs and remove the following programs.
Spybot Search and Destory
Please download the OTMoveIt by OldTimer.
- Save it to your desktop.
- Please double-click OTM.exe to run it.
- Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:files
C:\Windows\Tasks\bzuhknhx.job
C:\Windows\Tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job
C:\Windows\Tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"d06888aa"=-
"PC Antispyware 2010"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=-
"Cognac"=-
"MSFox"=-
"sysguard"=-
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00
"Notification Packages"=hex(7):73,63,65,63,6c,69,00,00 - Return to OTMoveIt, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
- Click the red Moveit! button.
- Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
- Close OTMoveIt
Please post the OTMoveIt log.