Open Notepad and copy all the text inside the quote box by highlighting it all and pressing CTRL C on your keyboard, then paste it into Notepad
Save this as CFScript to your desktop.Registry::
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{56F46B8B-B051-4575-B5A4-276AFEF788BE}]
C:\WINDOWS\system32\pmnll.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EA815CB0-F511-4E8E-8BD0-510DFC950A50}]
C:\WINDOWS\system32\jkhfe.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winbue32]
winbue32.dll
Then drag the CFScript into ComboFix.exe as you see in the screenshot below.
This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply
together with a new HijackThis log.
Remove these with HJT
O2 - BHO: (no name) - {00D56C36-3C97-4CCA-8C97-4171BD6AB299} - (no file)
O2 - BHO: (no name) - {04AB2D30-D9C5-4D52-BE07-053A9C471BE1} - (no file)
C:\WINDOWS\tsnpstd3.exe <--Right click on this file and go go Properties and let me know if the file is related to a web cam or whatever its related to.
Let me see the new Combofix log and a New HJT log and let me know about that file.