[Closed] HiJackThis Log long term problems

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Compaq_Owner\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.earnware.com/
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {7f609664-aeaf-4d7e-85d1-eb0d971140dd} - C:\WINDOWS\system32\kutosiva.dll (file missing)
O2 - BHO: C:\WINDOWS\system32\hs78344kjkfd.dll - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hs78344kjkfd.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [CPMe3615cea] Rundll32.exe "c:\windows\system32\tekiwiho.dll",a
O4 - HKLM\..\Run: [e0526f76] rundll32.exe "C:\WINDOWS\system32\nebiyune.dll",b
O4 - HKLM\..\Run: [dahisirulo] Rundll32.exe "C:\WINDOWS\system32\roboketu.dll",s
O4 - HKCU\..\Run: [n92dfi6rysyur2c4od3hy7c3ej4sl9qppvn6e8s2syjr22x] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\v7rhc8aviuv.exe
O4 - HKCU\..\Run: [pl7cjhwm2nxt3xcvg2begtapeyhr3itr0ev0rt9a5] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\je30fhore.exe
O4 - HKCU\..\Run: [jprdx53wk0rycnppi6pdqzheetp83v3snoy] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\u253bpey0.exe
O4 - HKCU\..\Run: [wqmylzxns] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sjzya4dfhch.exe
O4 - HKCU\..\Run: [p20x4s6apjiasto7fine0yw] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\mzge8q8s2djwi.exe
O4 - HKCU\..\Run: [pjl37r71dg3pyxtvkd8qqmar1l125saum0lewze] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lgdkgoy9kj.exe
O4 - HKCU\..\Run: [g42wcz3vbq269akstz5uygqhut5eto16bqtnh5uy6i0b] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\v885vhzrm7.exe
O4 - HKCU\..\Run: [f9eaijxdib] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\oekn23at6va.exe
O4 - HKCU\..\Run: [nk2mxwxeah35dvq4uibrd0qj1nqj8q] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zxk68dcm9dtq.exe
O4 - HKCU\..\Run: [p05dyz6j5a4parjl3jc8qykwv3rd] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\s3w5fznot10oq.exe
O4 - HKCU\..\Run: [jwj0f5br9sre0lisx06y69jpz3pkgvvb3lqf] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\gmfol9.exe
O4 - HKCU\..\Run: [gs5n1mvwek1kf5ie8f29eezln6f0lowhi9ou0hz8h30kczhs] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\dh3o5ade3.exe
O4 - HKCU\..\Run: [qur8juwffm1] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lvr7vl34dpbz9.exe
O4 - HKCU\..\Run: [e6fn8tqjfusjjomfyqttmm77cve931wj4ms4sq39tr] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\o5mr11klp.exe
O4 - HKCU\..\Run: [ggveiw9sw01dil4rp31o9uk462yny2eqxdkh4doyhb1mbdbp] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\g1tb06bv8.exe
O4 - HKCU\..\Run: [p4flfzpka07z] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\lpbghqoh10o8.exe
O4 - HKCU\..\Run: [z7b8lhtivvsyq1t3b8i66abcpem5j1c5vxeoc4k] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\my95ma6d843e.exe
O4 - HKCU\..\Run: [q2d0emoyjltr5fknv] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\llm28ku02z.exe
O4 - HKCU\..\Run: [bszcjy5r4yvu5nsujyqfvcsiy60d22xzop5g129w1al48qwx] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\yyu1g3.exe
O4 - HKCU\..\Run: [xi474383b9qzs0p0n77fb6zqzcx8ma8luz] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\qpplgsb7i.exe
O4 - HKCU\..\Run: [kzw04s8whws3ivqyrpx] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\chqsf6b.exe
O4 - HKCU\..\Run: [x12uxaibyts05hvc74v] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\gw797cluzoek4.exe
O4 - HKCU\..\Run: [bhvautxdl9t62rh6u7kr2q4exho1wdf50izjc2q06] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\jhdk3df.exe
O4 - HKCU\..\Run: [n01cjqrtkhl974iarfmwdy4lkylhpjavcbj3] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\iha9uuotu6ac.exe
O4 - HKCU\..\Run: [unj0tcs2hbw7fii9x2uwrjka09uvst9tkvbgzgcg336smocbzu] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\r46jn8o.exe
O4 - HKCU\..\Run: [wmpyl7u8acvkx498939l85vp1sxh4k9lr] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\f236pfv98uy.exe
O4 - HKCU\..\Run: [vx0ri05311wlr7sqog3a2lbb] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\r5676h.exe
O4 - HKCU\..\Run: [mvq8lt96bio] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ql3pv6x2bcyj.exe
O4 - HKCU\..\Run: [rki3t3opkbtvtv6hc0dtllhbvoog3zovyovlrzoqcn9ygqzp4] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\puyr4pdraz3.exe
O4 - HKCU\..\Run: [uxhnvinvvwsfpp4j8u] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\h1cohawhmp.exe
O4 - HKCU\..\Run: [c7gxhoxazgagqkn6sf5vg5gju8yx7i03] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\jlzhk4m.exe
O4 - HKCU\..\Run: [qwcm6rb6n2o74y2ay8x566i3smqowzxb] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\c9iq3hw7l.exe
O4 - HKCU\..\Run: [spd3u2flk1bx3viwo38vqafu59u8lbdywrt9uy] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\u56r2mny4.exe
O4 - HKCU\..\Run: [f8acjykm336rl] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsi998y0o3.exe
O4 - HKCU\..\Run: [h75f7s93kwqo6duwyi23y430270ltu1wggcn] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\jd1sls2mu3y5.exe
O4 - HKCU\..\Run: [jk5pdokdoijakgc8tlbomqb80m2qrzr] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\p7q8hclq.exe
O4 - HKCU\..\Run: [psw0c3jf4b5528cxay6os] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\zu437k.exe
O4 - HKCU\..\Run: [gb5cmgdnqiy6f5a75nxo82cwibupwo] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\bvygkwa23rys1.exe
O4 - HKCU\..\Run: [wymq7efbzeuzg49hrf23pe63j5nu1udgbd5brbdkzhm5fkl] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\hyhjmafpi9w.exe
O4 - HKCU\..\Run: [oy636dimmew3auyeor] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\qqptvnakawr.exe
O4 - HKCU\..\Run: [s3a8thkg0a6pbabprty0ztsvb5n73] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\sr26rzat4r.exe
O4 - HKCU\..\Run: [bapjgk4bo1r8z2tnx4nyaa] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ek7n5qwx83kj.exe
O4 - HKCU\..\Run: [k29eps1t0pebj9q1jqzbh38qvyw52nfzvb0tu] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ylnwsb.exe
O4 - HKCU\..\Run: [bjy9dbafngfr0a5c1cs3cdmuk9mwyl765vkmc9mx7he6othnp6] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ckdybn2kild4.exe
O4 - HKCU\..\Run: [avn5febsxh1bekr1bson40gq] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\ko6xvibtza1b.exe
O4 - HKCU\..\Run: [a9p3mqzsntrr128tmqio5e39hfph5j4k6t5mhr8fdqrh49] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\gt65rd83.exe
O4 - HKCU\..\Run: [ojsivfi6d8obuqrtth03fcvpfbq6nczi9yw] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\eqgczvykbw.exe
O4 - HKCU\..\Run: [e1c3ex0knjw] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\fmnugtn9vq.exe
O4 - HKCU\..\Run: [w4afxmhp8o0r7zz43b24sgz50gbqtz] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\wdp0eyz3.exe
O4 - HKCU\..\Run: [unr1nmmcbrmvm8v94pmyaoqck0y6gzwv] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\uylrk2xnzm.exe
O4 - HKCU\..\Run: [x2aczlu1zyzeyxkbv9xr] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\qestxn8.exe
O4 - HKCU\..\Run: [l8a4nf8oq2jgnpky93jjibg9x4xpqsca1qm4n8ifrx5] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\pj1zlka5x.exe
O4 - HKCU\..\Run: [ieg1cq021csri8vi2vv3b6qmmx9zvcul4i8nhm9fs7jj2q] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\xmxr019.exe
O4 - HKCU\..\Run: [g5pmu4o9w3kruotpwv4p7dkwk2qb] C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\znkkkegk6wuh.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [dahisirulo] Rundll32.exe "C:\WINDOWS\system32\roboketu.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [dahisirulo] Rundll32.exe "C:\WINDOWS\system32\roboketu.dll",s (User 'NETWORK SERVICE')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O20 - AppInit_DLLs: C:\WINDOWS\system32\dasakebe.dll wvtkrz.dll jkiuxp.dll igktyt.dll mwqasa.dll c:\windows\system32\tekiwiho.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\tekiwiho.dll
O22 - SharedTaskScheduler: jgzfkj9w38rksndfi7r4 - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hs78344kjkfd.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\tekiwiho.dll

–
End of file - 7878 bytes

p.s. thank you for your help

Hi,

Download ComboFix by sUBs from here or here

Note: If you already have a copy of ComboFix on your system it is essential that you delete it before downloading this copy.

**Save it to your desktop**

Double click on ComboFix.exe & follow the prompts. If you are prompted to install the Recovery Console I recommend you go ahead and hit yes.
When finished, it shall produce a log for you. Please save that log to post in your next reply along with a fresh HJT log

Notes:

• Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
• ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
• Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you - please let me know.
• ComboFix disconnects your machine from the internet when it runs. This connection should be automatically restored when ComboFix completes its run. If ComboFix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

I need to see another log from HijackThis.

• Run Hijackthis.
• Click on Open the Misc Tools section.
• Next click on Open uninstall manager.
• Press the Save list button.
• Save the file to your desktop, with the default name of uninstall_list
• Copy & Paste the entire contents of that file in your in your next post.

You don't appear to be running any Anti-Virus software.

Install Anti-Virus software! Without any anti-virus software, your computer is wide open to infection. If you don't have any Anti-Virus software I strongly recommend you download Avast! or AVG Free

Thanks.

I have tried to upload my ComboFix Log but the file size exceeds the limit thank you. This is the "unistall_list" from HiJackThis Adobe Flash Player 10 ActiveX Adobe Reader 8.1.2 Agere Systems PCI Soft Modem AIM 6 Apple Mobile Device Support Apple Software Update Combined Community Codec Pack 2008-09-21 16:18 Compaq Connections Diablo II Dynex Wireless G Adapter Easy Internet Sign-up getPlus®_ocx High Definition Audio Driver Package - KB835221 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB926239) Hotfix for Windows XP (KB952287) IntelliMover Data Transfer Demo InterVideo WinDVD Player iTunes J2SE Runtime Environment 5.0 Update 3 Java 2 Runtime Environment, SE v1.4.2_03 KBD Lexmark 2500 Series Macromedia Shockwave Player Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Office Standard Edition 2003 Microsoft Plus! Dancer LE Microsoft Plus! Digital Media Edition Installer Microsoft Plus! Photo Story 2 LE Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Visual J# .NET Redistributable Package 1.1 Microsoft Works 7.0 Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0 PC-Doctor for Windows PixiePack Codec Pack PS2 Python 2.2 combined Win32 extensions Python 2.2.1 QuickTime RealPlayer S3 S3Display S3 S3Gamma2 S3 S3Info2 S3 S3Overlay Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB911565) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911280) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922760) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933566) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB939653) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB942615) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944338) Security Update for Windows XP (KB944533) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB947864) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956390) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958215) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB960714) Security Update for Windows XP (KB960715) Sonic RecordNow! Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB929338) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB942840) Update for Windows XP (KB946627) Update for Windows XP (KB951072-v2) Update for Windows XP (KB955839) Update for Windows XP (KB967715) VIA Rhine-Family Fast Ethernet Adapter VIA/S3G Display Driver Viewpoint Manager (Remove Only) Virtual DJ - Atomix Productions VnrPack Windows Installer 3.1 (KB893803) Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player 11 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB883667 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 p.s. thank you for your time

Here is the first part of my combo fix log and I will post the following part in the next post this is combofixlog1

and here is combofix log 2 thank you so much.

Hi,

Before we start next step, there's just a couple of things we need to check out.

We need to upload a file to Jotti

1. Click HERE to get to Jotti's site.

2. At the top of the Jotti window, use the Browse button to locate the following file on your system:

c:\windows\system32\spoolsv.exe

3. Once you have located the file, click SUBMIT and the content of the file will be uploaded by the site and analysed.

4. Please provide me with the results of the analysis.

5. Please repeat steps 2-4 for the following files:
c:\windows\system32\kernel32.dll

Thanks.

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log