Fix with ComboFix
Let's prepare a Script for ComboFix to mark some things for being deleted.
- Press the
+ R on your keyboard at the same time.
- A Run window should appear in the lower left corner. Type in notepad.exe and press Enter.
- In the shown window paste in the following script:
Code:
Folder::
c:\users\ME\AppData\Roaming\Acviuqm
c:\users\ME\AppData\Roaming\Yhyligi
c:\programdata\{CA2FACF7-9029-4A21-892B-E7F60B39FF1A}
Driver::
gvhaxken
File::
c:\windows\System32\drivers\emkgqbd.sys
- Go to File menu and select Save as.
- Make sure that the Save as type option is set to Text files (*.txt) and the place to save will be your desktop.
- Name the file CFScript and select Save.
Your
CFScript.txt file should appear on your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions
here.
- Now drag your CFScript file and drop it onto the
icon.
- This will start ComboFix. Let it run uninterrupted!
- A reboot may be needed during this run. Allow it.
- When finished, it shall produce a log for you at C:\ComboFix.txt and display it.
Please include that log in your next reply.
If you'll encounter any issues with internet connection after running ComboFix, please visit
this link.
If an error about operation on the key marked for deletion will appear after running the tool, please reboot your machine.
Do not forget to turn on your previously switched-off protection software!
Fix with Farbar Recovery Scan Tool
This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.
Download attached
fixlist.txt file and save it to the Desktop:
Both files,
FRST and
fixlist.txt have to be in the same location or the fix will not work!
- Right-click on
icon and select
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.