[rstones12]

JTuong,
OK lets give this another try.


Reboot into SafeMode

Please run Killbox.exe that you saved to your desktop

• In the killbox program, select the Delete on Reboot option.
• In the field labeled Full Path of File to Delete enter the file paths listed below ONE AT A TIME (EXACTLY as it appears, please double check to make sure!):

C:\WINDOWS\CFINDU~1.EXE
C:\WINDOWS\DEZODLL.EXE
C:\WINDOWS\GOTBENC.EXE
C:\WINDOWS\SYSTEM32\GtwDocs.ico

• Press the button that looks like a red circle with a white X in it after each one.
• When it asks if you would like to delete on reboot, press the YES button, when it asks if you want to reboot now, press the NO button.
• Do this after each one until you have entered the LAST file path I have listed above.

Reboot your system and post back an new Findit log and HJT log by using Add Reply

Thanks,
rstones12