Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below. [b]
O4 - HKLM..\Run: [Windows 32 system] win32.exe
O4 - HKLM..\Run: [System Startup] voltio.exe
O4 - HKLM..\Run: [MSCommX] C:\WINDOWS\System32\mscommx.exe
O4 - HKLM..\Run: [MSVSync] videosync.exe
O4 - HKLM..\RunServices: [Windows 32 system] win32.exe
O4 - HKLM..\RunServices: [System Startup] voltio.exe
O4 - HKLM..\RunServices: [MSVSync] videosync.exe
O4 - HKUS\S-1-5-18..\Run: [MSVSync] videosync.exe (User ‘SYSTEM’)
O4 - HKUS\S-1-5-18..\RunOnce: [Windows 32 system] win32.exe (User ‘SYSTEM’)
O4 - HKUS.DEFAULT..\RunOnce: [Windows 32 system] win32.exe (User ‘Default user’)
O23 - Service: hpdj - Unknown owner - C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\hpdj.exe (file missing)
O23 - Service: Video Sync Manager (vsync) - Unknown owner - C:\WINDOWS\System32\videosync.exe (file missing)
[/b]Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis.
THEN
@echo off
sc stop hpdj
sc delete hpdj
sc stop Video Sync Manager
sc delete Video Sync Manager
exit
Next you will need to create the batch fix to do that copy and paste [b]ALL[/b] of the above in the quote box to a notepad file.
Then in the text file go to [b]FILE > SAVE AS [/b] and in the dropdown box select [b]SAVE AS TYPE [/b] to[b] ALL FILES [/b]
Then in the [b]FILE NAME [/b] box type [b]fix.bat[/b]
This will create a batch file
http://img524.imageshack.us/img524/9383/batmp6.jpg
Then run fix.bat by double clicking you may see a black box appear this is normal
NEXT
Please download the OTMoveIt2 by OldTimer.
[*] Save it to your desktop.
[*] Please double-click OTMoveIt2.exe to run it.
[*]Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
C:\WINDOWS\System32\mscommx.exe
C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\hpdj.exe
C:\WINDOWS\System32\videosync.exe
[*] Return to OTMoveIt2, right click in the “Paste List of Files/Folders to be Moved” window (under the light blue bar) and choose Paste.
[*] Return to OTMoveIt2, right click in the “Paste List Of Files/Patterns To Search For and Move” window (under the yellow bar) and choose Paste.
[*]Click the red Moveit! button.
[*]Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
[*]Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
FINALLY
Download ComboFix from Here or Here to your Desktop.
[*]Double click combofix.exe and follow the prompts.
[*]When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix’s window while its running. That may cause it to stall
