Please run Hijack this again
and remove following items.
C:\Documents and Settings\All Users\Application Data\incvwbmv\apelibsd.exe
C:\WINDOWS\system32\afmbwjil.exe
O2 - BHO: (no name) - {01A33D85-4706-452A-B71A-99510ADA8C0C} - C:\WINDOWS\system32\mlJAqrQj.dll
O2 - BHO: (no name) - {5DA9D1D7-36B4-4576-A77A-C660352F807A} - (no file)
O2 - BHO: (no name) - {C64C20AE-A8C6-4B8E-B6A0-900E813D0AF2} - C:\WINDOWS\system32\rqRKDwwu.dll
O3 - Toolbar: vnbptxlf - {4126A715-7157-459A-BE7F-D19C9770E169} - C:\WINDOWS\vnbptxlf.dll
O4 - HKLM\..\Run: [9c49d6db] rundll32.exe "C:\WINDOWS\system32\ecbfwkra.dll",b
O4 - HKCU\..\Run: [iiudhslh] C:\WINDOWS\system32\afmbwjil.exe
O4 - HKLM\..\Policies\Explorer\Run: [zQJmn93EYj] C:\Documents and Settings\All Users\Application Data\incvwbmv\apelibsd.exe
O20 - Winlogon Notify: mlJAqrQj - C:\WINDOWS\SYSTEM32\mlJAqrQj.dll
After removing these items, Restart your computer in Safemode and rerun the hijackthis and make sure all the listed items have been removed.
Also in safemode run your antispyware program to make sure there are no more spyware in your system.
|