winlogon.exe infection! Help!

Please continue

Sorry about that. It should be as followed

A> C:
C:> CD WINDOWS\ERDNT\SUBS
C:\Windows\ERDNT\subs> BATCH ERDNT.CON
C:\Windows\ERDNT\subs> EXIT

I still get "Invalid directory" when I type "CD WINDOWS\ERDNT\SUBS" when I'm on the d drive.,
I can get into the windows dir by typing "CD WINDOWS", but thats it…

There are 68 dir(s) in the windows dir, and ERDNT is not one of them…

See if you can locate this folder - D:\QooBox\Hiv-backup

I found this: D:\QOOBOX\HIV-BA~1 and it has the ERDNT.CON file in it….. along with 9 others.

That's good. It's another backup created by ComboFix. We can use that.

Please do this …

CD D:\QOOBOX\HIV-BA~1
TYPE ERDNT.CON

Does it say ….

copy "C:\WINDOWS\system32\config\SECURITY" "C:\WINDOWS\system32\config\SECURITY.bak"
copy "SECURITY" "C:\WINDOWS\system32\config\SECURITY"
copy "C:\WINDOWS\system32\config\software" "C:\WINDOWS\system32\config\software.bak"
copy "software" "C:\WINDOWS\system32\config\software"
copy "C:\WINDOWS\system32\config\system" "C:\WINDOWS\system32\config\system.bak"
copy "system" "C:\WINDOWS\system32\config\system"
copy "C:\WINDOWS\system32\config\default" "C:\WINDOWS\system32\config\default.bak"
copy "default" "C:\WINDOWS\system32\config\default"
copy "C:\WINDOWS\system32\config\SAM" "C:\WINDOWS\system32\config\SAM.bak"
copy "SAM" "C:\WINDOWS\system32\config\SAM"

Note the parts where I highlighted red. Does it say C: or does it say D:

That's good. It's another backup created by ComboFix. We can use that.

Please do this …

requires editing

Do what exactly?

Please refer to previous post. I have edited it

Oh, sorry It says C, they all say C…

After each copy command I hit enter right? Do I include the quotes? Do I overwrite when prompted (yes/no/all)?

I edited the previous post to make it easier for you. No need for quotes. Overwrite if prompted

Done.

Is your machine bootable now?

I just finished all the copying…. what do I do now? Do I use that BATCH command?

Remove the floppy. Then reboot the machine