I assume you don´t use proxy server, as it was not shown in your first hijackthis log.
Go to Internet Settings
From the "Tools" menu, select "Internet Options".
Click the "Connections" tab.
Under "Local Area Network Settings," select "LAN Settings".
Under the header of "Proxy Server," uncheck "Use a Proxy Server ."
Click " OK" twice to save your preferences.
Restart internet explorer.
Download HostsExpert:
http://www.majorgeeks.com/Hoster_d4626.html
Choose one of the servers at Majorgeeks....save the file on your desktop
Unzip HostsXpert 4.2 - Hosts File Manager to a convenient folder such as C:\HostsXpert 4.2 - Hosts File Manager
Run HostsXpert 4.2 - Hosts File Manager from its new home
Click on "File Handling".
Click on "Restore MS Hosts File".
Click OK on the Confirmation box.
Click on "Make Read Only?"
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.
Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe
And save to the desktop.
Open notepad and copy/paste the text in the quotebox below into it:
Name the file as
CFScript
and Save it on the desktop
Killall::
Snapshot::
File::
c:\windows\ld08.exe
c:\windows\pp06.exe
C:\WINDOWS\system32\lewiyidi.dll
c:\windows\system32\razifazi.dll
Folder::
C:\WINDOWS\system32\796525
http://www.fromsej.saknet.dk/billeder/cfscript.gif
Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe.
Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
