Well, we just finished removing some weird kind of hijack program that seemed to be using the process alias "diskpc.exe" and ran from the windows\addins directory. It would restart itself when you tried to terminate it, even if you used the program kill.exe. Finally, in safe mode, the entry was deleted from the registry, and upon reboot, the process (diskpc.exe) didn't load, allowing the addins directory to be deleted.
So far the machine works fine after those steps. Who knows where this program came from? Any thoughts?
If you'd like your machine checked for malware, please do this:
Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
Download HijackThis into this folder.
