Oops, didn't realize you already posted bobbye. This needs to be done as well
We need to get rid of one of the services running on your machine. To do this, copy (Ctrl +C) and paste (Ctrl +V) the text in the code box below to Notepad.
Code:
@echo off
sc stop lanmandrv
sc delete lanmandrv
del service.cmd and exit
Save it to your desktop as File name:
service.cmd
Save as type:
All Files
Once done, double click service.cmd to run it. A command window will open briefly, then close. This is quite normal.
------------------------------------------------------------------------
Backup your regsitry
First, we need to backup your registry:
Please go to Start > Run
Paste in the following line:
- regedit /e c:\registrybackup.reg
Click OK.
It won't appear to be doing anything, that's normal.
Your mouse pointer may turn to an hour glass for a minute.
Please continue when it no longer has the hour glass.
Making a .reg file
Open notepad and copy and paste the text in the quotebox below in it:
Code:
[b]REGEDIT4
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\opnnopnl]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\xxyaaAqo]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Winir08.sys]
[/b]
Name the file as
Fix.reg
Change the
"Save As" type to
"All Files" and save it on the desktop.
It should look like this:
Double-click on it and when it asks you if you want to merge the contents to the registry, click
yes/ok.
------------------------------------------------------------------------------
After that reboot and post a fresh Hijackthis log
