Still the two to remove from the startup folder
These are very stubborn and difficult to kill
Once combofix has run again could you check the two locations to ensure that they have gone
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Open
notepad and copy/paste the text in the quotebox below into it:
File::
c:\users\Momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ea59.js
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ea59.js
Save this as
CFScript.txt, in the same location as ComboFix.exe
Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it will produce a log for you at
C:\ComboFix.txt which I will require in your next reply.