Hi,
First, warning. You need to use only one AV. Uninstall one, use another ...
Then we shall target malware via ComboFix's CFScript.
Multiple Antivirus ProgramsYou are running more than 1 Antivirus program!
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
Running - more than one - antivirus program is not recommended because:[list=1]
- They can conflict with each other.
- Report the other antivirus software as malicious.
- Antivirus programs use an enormous amount of computer's resources... actively scanning your computer.
- Can cause your computer to become unstable...run slowly and even, in rare cases, BSOD crash...etc
I
strongly suggest you uninstall one of them. Which one, is your decision.
Then download uninstall utility and remove posible leftovers.
http://singularlabs.com/uninstallers/security-software/http://www.askvg.com/ultimate-collection-of-uninstallers-removal-tools-for-all-popular-anti-virus-software/--- --- --- --- --- --- --- ---
ComboFix's CFScript--- ---
1. Temporarily disable your
AntiVirus program, usually via a right click on the System Tray icon. They may interfere with Combofix.
2. Open notepad and copy/paste the text present inside the code box below:
KillAll::
FCopy::
c:\windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll|c:\windows\system32\rpcss.dll
File::
C:\windows\SysNative\exiyfhi.pxj
C:\windows\SysNative\kcwpysn.zhr
C:\windows\SysNative\nipt.lrq
C:\windows\SysNative\qogpnl.glb
Save this as
CFScript.txt Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
- Attach the contents of the log in your next reply. (typical location: C:\
ComboFix.txt )
- Also, attach the C:\Qoobox\ComboFix-quarantined-files.txt