I've got the same problem! My question is: should the infected computer (if useable) still be used online, or is there a risk of losing personal info due to a key logger or something? I guess even the experts are still trying to figure it out. Aside from the hijacked browser search links, my computer seems ok (I can't rename .exe files and there are probably other things disabled that I haven't tried). I've spent quite a few hours on this and can't wait to get some useable advice.

Download and run Win32kDiag:

1. Download Win32kDiag from any of the following locations and save it to your Desktop.
   
   • Win32kDiag.exe from geekstogo.com
   • Win32kDiag.exe from bleepingcomputer.com
   • Win32kDiag.exe from rootrepeal.psikotick.com
2. Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
3. When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
4. Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic, please do not attach the file.

Please let it run for at least an hour without bothering it regardless of what it says. Then post back the log.

Please post a status update on this.

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.