Hi
Does Symantec also have antivirus and/or firewall?
Open notepad and copy/paste the text in the quotebox below into it:
Code:
File::
C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\cdiskdun.sys
Folder::
C:\WINDOWS\system32\vMW02a
C:\WINDOWS\system32\ss1
C:\WINDOWS\system32\rv1
C:\WINDOWS\system32\bbc1
C:\temp\xOe
C:\Program Files\ISM2
Driver::
cdiskdun
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{07AA283A-43D7-4CBE-A064-32A21112D94D}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11B2C314-1D4C-4247-AA3F-E480B3A886C1}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8FB5B012-E8CB-46cd-B6D2-ED428FAE9043}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B49463F9-305E-4B03-AA8F-C4C980BE2571}]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZangoOE"=-
"ZangoSA"=-
Save this as "CFScript"
Then drag the CFScript into ComboFix.exe as you see in the screenshot below.
This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThislog.