Please Download Killbox from
[Only Registered and Activated Users Can See Links. Click Here To Register...]
Run and scan with HijackThis. Place checks beside the following:
O4 - HKLM\..\Run: [wurrqpc.dll] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\wurrqpc.dll,mrvhnhg
Close all open windows/browsers and click the Fix button.
Run KillBox. Select:
* Delete on Reboot
* End Explorer Shell While Killing File
[*]Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\WINNT\SYSTEM32\winjvd32.dll
[*] Return to Killbox, go to the File menu, and choose Paste from Clipboard.
[*]Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).
If your computer does not restart automatically, please restart it manually.
If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run Killbox, click
[Only Registered and Activated Users Can See Links. Click Here To Register...] to download and run missingfilesetup.exe. Then try Killbox again.
Reboot and post a new HijackThis log please.