Webuser Forums: Virus found JS/Psyme.MZ

Welcome to the Webuser forum.

Rerun HJT,and put a checkmark beside these :-

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

now close all windows and browsers and click FIX CHECKED

Then boot up in SAFE MODE

Then navigate to and delete these files\folders in BOLD

C:\WINDOWS\system32\winsys2.exe

then reboot normally.

then :-

Please download ComboFix from either of these two locations

BleepingComputerComboFix
geeks to go combofix

* Double click combofix.exe & follow the prompts.
* When finished, it shall produce a log for you. Post that log in your next reply

Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Post back with the log from ComboFix and a new HJT log please.

--------------------
MY HELP IS FREE,BUT PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST SPYWARE.

You don't stop laughing when you get old, you get old when you stop laughing!

Post Extras