Hi karavirs,

You need to fix this entry with HijackThis!

O2 - BHO: 360°²È«ÎÀÊ¿ - {8C7A85DB-99B6-4477-B14B-28FC27766244} - C:\WINDOWS\system32\fjzthwal.dll

Reboot into safe mode after fixing the entry and delete the file if it has not been deleted already. You may need to eneable ‘view hiddedn files’.

http://www.pchell.com/support/safemode.shtml

http://www.bleepingcomputer.com/tutorials/tutorial62.html

Try to delete the R0/01 entries again after you have done this.

You need to investigate the following further:

C:\WINDOWS\system32\cisrv.exe
c:\windows\pmsgr.exe

Try to find the files and submit them to VirusTotal:

http://www.virustotal.com/en/indexf.html