Please download VundoFix.exe to your desktop from
http://www.atribune.org/ccount/click.php?id=4
Double-click VundoFix.exe to run it, and click the Scan for Vundo button.
When the scan completes click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files - click YES
Your desktop will then go blank as the process of removing Vundo starts.
When completed it will prompt that it will shutdown your computer - click OK.
Restart your computer, start HijackThis and press Scan Only. Check the following entries if they exist, and press Fix Checked.
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {182B90A3-F372-438A-800C-6814B4DE417B} - C:\WINDOWS\system32\pmnopqp.dll
O2 - BHO: (no name) - {4FC4E0B4-9A46-4C29-B5E6-B6ADDB35F43B} - C:\WINDOWS\system32\nnnmk.dll (file missing)
O2 - BHO: (no name) - {541DAF3A-AFAA-48A3-B1DB-4612CBB8F36D} - C:\WINDOWS\system32\rqrom.dll (file missing)
O2 - BHO: (no name) - {57E218E6-5A80-4f0c-AB25-83598F25D7E9} - C:\WINDOWS\system32\pqfeubbj.dll (file missing)
O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\otjqlyku.dll",setvm
O20 - Winlogon Notify: fcyvt - C:\WINDOWS\
O20 - Winlogon Notify: nnnmk - C:\WINDOWS\system32\nnnmk.dll (file missing)
O20 - Winlogon Notify: pmnopqp - C:\WINDOWS\SYSTEM32\pmnopqp.dll
O20 - Winlogon Notify: rqrom - C:\WINDOWS\system32\rqrom.dll (file missing)
Post the contents of C:\vundofix.txt plus a new Hijack this log. Phew, sorry for the mixed up posts.