Hi gocowboys77,
Step 1
Please disable Teatimer as it will interfere with the fixes.
- Right click the Spybot Icon in the system tray near the clock (looks like a blue/white calendar with a padlock symbol).
- Click once on Resident Protection, then right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
- Go to Start > All Programs > Spybot - Search & Destroy > Spybot Search & Destroy.
- Click on Mode > Advanced Mode. When it prompts you, click Yes.
- On the left hand side, click on Tools.
- Check (tick) this box if it is not yet ticked: Resident.
- You will notice that Resident is now added under Tools. Click on Resident.
- Uncheck (untick) this box: Resident "TeaTimer" (Protection of over-all system settings) active.
- Exit Spybot Search & Destroy.
- Restart your computer for the changes to take effect.
Please also disable McAfee Antivirus temporarily to prevent it from interfering with the fixes.
Step 2
Please open Notepad and copy and paste the following in the Code box into Notepad.
File::
c:\windows\system32\stu2.exe
DirLook::
C:\GRAPHPAP
C:\Temp
FCopy::
c:\windows\ServicePackFiles\i386\userinit.exe | c:\windows\system32\userinit.exe
Click on
File >
Save As....
In the File Name field, copy and paste in
CFScript.txt.
Do not change the file name.
Click
Save.
Referring to the picture below, drag CFScript into Combofix.
Combofix will start running. When done, a log will be produced. Please post this log in your next reply.
Do not mouse click on Combofix while it is running. That may cause it to stall.