Hi....

I see "rundll32.exe C:\WINDOWS\system32\drvriw.dll,startup" ---> it's something like this sometimes it;'s drvriw.dll, or drvrph or something else similar and there is also something to do with MSDisp32 on my computer.

I deleted the referencing startup entry from system startup using CCleaner and problem seems to go away. Another time I started computer, similar problem appear. Problem doesn't occur every boot but it happens now and then so I wonder what's going on

I wonder how to fix this problem? I used malwarebyte's antimalware and AVG 8.0 free on my computer and have deleted all problematic things both have discovered.

----------------------------------------

Windows Vista w/ SP1
AVG8.0 free installed, updated.
Malwarebyte's AntiMalware free version updated.
Windows Firewall enabled --> I would be using Commodo firewall but I didn't like all the popups that tell me to approve/block some new software or process.



Thanks!


Download and rename TrendMicro HijackThis.exe (HJT)

• Double-click on HJTInstall.
• Click on the Install button.
  
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
  
• Upon install, HijackThis should open for you.

• Close HijackThis and rename it.
  
• Go to C:\Program Files\Trend Micro\HijackThis.exe
  
• Right click on HijackThis.exe and select Rename.
  
• Type in sniper.exe and press Enter.
  
• Right-click on sniper.exe and select Send To > Desktop (create shortcut)

• From the desktop open Hijackthis.
• If using Windows Vista, Right-click and Run As Administrator.
  
• Click on the Do a system scan and save a log file button
  
• Hijackthis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
  
• Do not have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

• R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
• O4 - HKCU\..\Run: [MSSMSGS] rundll32.exe windig32.rom,FFdRun

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.
  

• Link #1
  
• Link #2

• Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting Combofix.
• Important! Temporarily disable your antivirus, script blocking and any antispyware real time protection before performing a scan.
  
  • Click this link to see a list of security programs that should be disabled and how to disable them.
    
  • If yours is not listed and you don't know how to disable it, please ask.
• Warning: Combofix disconnects your computer from the internet. The connection is automatically restored before Combofix completes its run.
  
• Double click combofix.exe & follow the prompts.
• Choose Yes to accept the Disclaimers.
• When finished, it will produce a log for you.
• Post that log in your next reply.

• If Combofix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your computer.
  
• Important: Remember to re-enable your antivirus and antispyware before reconnecting to the Internet.