Welcome to our website.

please remove the file in safemode and then run a whole scan.

Then Please download Combofix:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

And save to the desktop.

Close all other browser windows.

Important-> Temporarily disable your anti-virus, real-time protection before performing a scan. They can interfere with combofix or remove some of its embedded files which may cause “unpredictable results”.

Go to Start->Run and copy/paste: ComboFix /snapshot and hit OK. It should run Combofix.

Please note, that once you start combofix you should not click anywhere on the combofix window as it can cause the program to stall. In fact, when combofix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.

When finished, it will produce a logfile located at C:\combofix.txt.

Post the contents of that log in your next reply with a new hijackthis log.

Microsoft.Windows.ActiveDesktop: [SBI $99FAD8A8] Impostazioni utente (Modifica al registro, nothing done)
HKEY_USERS\S-1-5-21-57989841-1801674531-682003330-42035\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper

Microsoft.Windows.Explorer: [SBI $1931FF4D] Impostazioni (Modifica al registro, nothing done)
HKEY_USERS\S-1-5-21-57989841-1801674531-682003330-42035\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges

Microsoft.Windows.disableSystemRestore: [SBI $6296EC95] Impostazioni (Modifica al registro, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableSR

Virtumonde.prx: [SBI $99CC2F62] Impostazioni di avvio automatico (Xyeyeg) (Valore di registro, nothing done)
HKEY_USERS\S-1-5-21-57989841-1801674531-682003330-42035\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Xyeyeg

Virtumonde.prx: [SBI $99CC2F62] File di programma (File, nothing done)
C:\WINDOWS\mluiolut.dll

Regards

Claudio