Hello again, and sorry for the delay!
I ran combofix, and after running it, the computer restarted, and upon restart I got the following error:
Illegal operation attempted on a registry key that has been marked for deletion.
I had a note specifically for that error:
Note 2: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer
Restart the computer as noted above and let me know if you still have the error.
Interesting...Combofix mentioned that it removed two orphaned entries that I would go after on a second run, but your start error:
"Could not load or ruun 'C:\Users\Name\LOCALS~1\Temp\okqzommhierz.bat' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry.'
...mentions it can't find the batchfile in question.
I'd like to try a one-two punch to these files and orphans, to make sure they're gone. Step 1 below is to remove the registry entries, and step 2 is to try and remove the files (if they still exist):
- Please re-run Hijack This, and choose the bottom selection "None of the above, just start the program".
- Next, click on Scan. When the scan finishes, place a checkmark next to "only" the three entries listed below:
F3 - REG:win.ini: load=C:\Users\Nicole\LOCALS~1\Temp\okqzommhierz.bat
O4 - HKCU\..\Run: [doxmjijm] regsvr32.exe /s "C:\ProgramData\doxmjijm.dat"
O4 - HKCU\..\Run: [qnmhma] regsvr32.exe /s "C:\ProgramData\qnmhma.dat"
- Close all open windows and browsers
- Click the FixChecked box
- Click Yes to the warning
Now, close the program and before rebooting, proceed to the next step:
Run a Combofix Script
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Open notepad and copy the text in the codebox below, then paste it into the empty notepad:
Save this as CFScript.txt, in the same location as ComboFix.exe
Referring to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
Please copy/paste the latest Combofix report in your next reply, and let me know of any remaining errors as well as how the machine is running now!