Download killbox from this link Killbox We will need it in safe mode later
Reboot into safe mode by following the directions at this link How To Reboot Into Safe Mode
Run HT from safe mode, close all windows except HT, place a check to the left of the following items and press "fix checked":
O4 - HKLM\..\Run: [*binkey] C:\WINDOWS\java\Packages\binkey.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} - http://www.mt-download.com/MediaTicketsInstaller.cab?refid=5071
O20 - Winlogon Notify: winwam32 - C:\WINDOWS\SYSTEM32\winwam32.dll
Start Killbox place a tick next to [x]Delete on reboot Press the ALL Files button.
Copy the following list of files to clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\Program Files\Common Files\ѕуstem32\ati2evxx.exe
C:\WINDOWS\TEMP\win1483.tmp.exe
C:\WINDOWS\TEMP\dbheljmd.exe
C:\WINDOWS\java\Packages\binkey.exe
C:\WINDOWS\SYSTEM32\winwam32.dll
Next click on the button that has the red circle with the white X in the middle.
It will ask for confimation to delete the files on next reboot and ask you if you want to reboot now.
Click Yes and let the computer reboot.
Run ATF-Cleaner from safe mode. Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
Run Ewideo from safe mode. When the scan has completed, Ewido will create a report.txt file. Click the "Save Report" button on the bottom of the screen and save the log to your desktop.
Please reboot into normal mode and post the ewido log and a new HT log.
If you have items unchecked in msconfig causing the very small amount of 04's to be visable in HT then they need to be unchecked before you post the new HT log or we may miss a baddie.
