system
16
ComboFix
[*]Please open Notepad (Start → Run → type notepad in the Open field → OK) and copy and paste the text present inside the code box below:
ClearJavaCache::
File::
C:\Program Files (x86)\SearchProtect\bin\ChromeModule.dll
C:\Program Files (x86)\SearchProtect\bin\cltmng.exe
C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe
C:\Program Files (x86)\SearchProtect\bin\FirefoxModule.dll
C:\Program Files (x86)\SearchProtect\bin\InternetExplorerModule.dll
C:\Program Files (x86)\SearchProtect\bin\SPHook32.dll
C:\Program Files (x86)\SearchProtect\bin\uninstall.exe
C:\Program Files (x86)\Windows jZip Toolbar\Datamngr\datamngr.dll
C:\Program Files (x86)\Windows jZip Toolbar\Datamngr\datamngrUI.exe
C:\Program Files (x86)\Windows jZip Toolbar\Datamngr\IEBHO.dll
C:\Users\leah.frostwire5\updates\frostwire-5.6.2.windows.exe
C:\Users\leah\AppData\Local\RivalGaming\Uninstaller.exe
C:\Users\leah\AppData\Roaming\Mozilla\Extensions{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\links@rivalgaming.com\components\xpcomponent.dll
C:\Users\leah\AppData\Roaming\SearchProtect\bin\cltmng.exe
C:\Users\leah\Documents\pal_install_noask_r109702.exe
C:\Users\leah\Downloads\frostwire-5.3.9.windows (1).exe
C:\Users\leah\Downloads\frostwire-5.3.9.windows.exe
C:\Users\leah\Downloads\intunemp3 (1).exe
C:\Users\leah\Downloads\intunemp3.exe
C:\Users\leah\Downloads\jZipV1 (1).exe
C:\Users\leah\Downloads\jZipV1.exe
C:\Users\leah\Downloads\mightymagoo-setup (1).exe
C:\Users\leah\Downloads\mightymagoo-setup.exe
C:\Users\leah\Downloads\musicoasis.exe
C:\Users\leah\Downloads\Setup_FreeBurner.exe
[*]Save this as CFScript.txt and change the “Save as type” to “All Files” and place it on your desktop.
http://img.photobucket.com/albums/v706/ried7/CFScriptB-4.gif
[*]Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
[*]Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
[*]ComboFix may request an update; please allow it.
[*]ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
[*]When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix’s window while it is running. That may cause it to stall.
Attach the new log made by ComboFix and then let me know what remaining malware problems you are having. 