Hi
Spybot seems to be still there please remove it since TeaTimer will otherwise make hjt entry fixing harder. Don't reinstall it until system is all clean.
Disable Windows Defender's realtime protection.
- Open Windows Defender
- Click on
Tools- Click on
General Settings- Scroll down to
Real-time protection options- Uncheck
Turn on Real-time protection (recommended)- Click
Save- Exit the program.
Start hjt, do a system scan, check (if found):
O2 - BHO: (no name) - SOFTWARE - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
Close browsers and fix checked.
Please remove those mail messages found by Kaspersky if you're not 100% sure of them. Clear Norton quarantine items.
Show hidden files
-----------------
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.
Delete following files if found:
C:\WINDOWS\system32\sufbkvfq.dll
C:\WINDOWS\system32\nsmD0.dll
Other bad items are in system restore (will be cleaned when it's resetted) and in QooBox folder (will be removed when ComboFix is uninstalled). We'll clean those when things are otherwise well.
Reboot the system and post a fresh hjt log. How's the system running?