Hi welcome to the forum. Let’s see what we can do.BYW, you can attach logs if you like, use the additional options button on the reply page.
Open Spybot and make sure teatimer is disabled, we will re-enable afterwards. To do so do the following
Click mode
click Advanced mode
if you get a warning answer “yes”
click tools
click resident
uncheck resident “teatimer” and SDHelper if installed
click allow change
reboot
Open HJT, run a system scan only, check mark these lines if present
O2 - BHO: (no name) - {c227cf91-4d7d-4ff6-a850-84f29d047a72} - C:\WINDOWS\system32\byevcti.dll
O2 - BHO: (no name) - {E1759A31-E627-4758-9562-6899DF36C9C2} - C:\WINDOWS\system32\efcbbxw.dll
O2 - BHO: (no name) - {F11340B3-7EF8-43A7-B6AC-00A89F050BFB} - C:\Program Files\MSN\hokewodelC:\WINDOWS\system32\vt8\tycodllz83122.exe.dll (file missing)
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
ALL OF THE 015 LINES
O20 - Winlogon Notify: efcbbxw - C:\WINDOWS\SYSTEM32\efcbbxw.dll
Close all other browsers/windows, click fix, close HJT.
Download ComboFix from Here or Here to your Desktop.
Double click combofix.exe and follow the prompts.
When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix’s window while its running. That may cause it to stall.
Please do the steps in order posted, getting a new HJT log after the combofix run. Thanks
