:OTL
DRV:64bit: - [2014/11/01 13:28:54 | 000,058,040 | ---- | M] (Corsica) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\webinstrNew.sys -- (webinstrNew)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: []  File not found
[2014/11/01 13:29:29 | 000,000,000 | ---D | C] -- C:\ProgramData\VhxYWgfV
[2014/11/01 13:30:10 | 000,001,358 | ---- | C] () -- C:\Windows\tasks\LKFC.job
[2014/11/01 13:30:00 | 000,001,360 | ---- | C] () -- C:\Windows\tasks\XUNRS.job
[2014/11/01 13:28:58 | 000,001,936 | ---- | C] () -- C:\Windows\patsearch.bin
[2014/11/01 13:28:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_webinstrNew_01009.Wdf
[2014/09/01 00:18:44 | 000,002,086 | ---- | C] () -- C:\Users\Al Pedersen\AppData\Roaming\LKFC
[2014/09/01 00:18:44 | 000,001,248 | ---- | C] () -- C:\Users\Al Pedersen\AppData\Roaming\XUNRS
[2011/09/04 15:40:46 | 000,000,000 | ---D | M] -- C:\Users\Al Pedersen\AppData\Roaming\NewspaperDirect

:Files
ipconfig /flushdns /c
netsh advfirewall reset /c
netsh advfirewall set allprofiles state on /c

:Commands
[Reboot]