[Matt77]

I have scanned the computer with Mcafee Security Center. I have completed the 7 steps on the malware removal guide. I was hoping if someone could look at the 3 logs I have attached.

Malware and stuff: "My documents" kept opening. Internet explorer opened a few times. Other pop ups kept opening.

If there is any other information you need just let me know.

Thank you very much. This site is amazing!

Matthew

[Albert Lionheart]

I have done the Hijackthis log - my be overopinionated but this is the best and needs no confirmation! Deal with these entries by clearing them
C:\Users\Matthew\AppData\Local\Temp\Vkc.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - HKLM\..\Run: [QuickCare2.2] "C:\Program Files (x86)\Qwest\QuickCare\bin\sprtcmd.exe" /P QuickCare2.2
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\Users\Matthew\AppData\Local\Temp\Vkc.exe

O4 - HKUS\S-1-5-18\..\Run: [DelayShred] c:\PROGRA~2\mcafee\mshr\ShrCL.EXE /P4 /q C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\AN SWER~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\AD S_7_~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\SZWH7TO2\HO ME_1~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\PNQ3V63Y\AD S_5_~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\PH ASE1~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\SZWH7TO2\AD S_10~1.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DelayShred] c:\PROGRA~2\mcafee\mshr\ShrCL.EXE /P4 /q C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\AN SWER~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\AD S_7_~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\SZWH7TO2\HO ME_1~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\PNQ3V63Y\AD S_5_~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\VLRT30DF\PH ASE1~1.SH! C:\Users\Matthew\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\SZWH7TO2\AD S_10~1.SH! (User 'Default user')

[Matt77]

Thank you Albert! I have fixed the entries that you specified.

Matthew

[enricklary]

Thanks for you suggestion dude. It's helped me a lot,,,