Hjt log

[beefstiu]

Hi all,

Something is removing my wallpaper everytime I reboot. Can you please look at the HJT log I attached?

Thanks

 

[beefstiu]

Sorry for double posting, but I also should let you know that I clicked on a "Work from Home" scam on someone's facebook wall few days ago.

 

[Bobbye]

IF you would like us to check for malware, please follow the steps in the Preliminary Virus and Malware Removal thread HERE.

When you have finished, please leave the requested logs for review.

We don't "screen" with HijackThis. However you might see an improvement if you do this:

Reopen HijackThis to 'do system scan only.' Check each of the following entries if present:
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user')

Close all Windows except HijackThis and click on "Fix Checked."

Reboot the computer. Let me know if this helps- then go on with the scans.