Computer Problems>>Help Please

Hi Edward005,

Welcome to the What the tech Forums
My name is mschroe919 and I am going to read your log.
I would like to help you So if you would….
Please be patient and I will be back as soon as possible.
While I am checking I am going to ask you to do the following:

FIRST:
show hidden files:
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

NEXT:]

Please download ATF Cleaner by Atribune.

Download Here:
http://www.atribune.org/ccount/click.php?id=1

This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

NEXT:

Download AVG Anti-Spyware from HERE and save that file to your
desktop.
This is a 30 day trial of the program

• Once you have downloaded ewido anti-spyware, locate the icon on the desktop
  and double-click it to launch the set up program.
• Once the setup is complete you will need run AVG Anti-Spyware and update the definition
  files.
• On the main screen select the icon "Update" then select the "
  Update now" link.
  • Next select the "Start Update" button, the update will start and a
    progress bar will show the updates being installed.
• Once the update has completed select the "Scanner" icon at the top of
  the screen, then select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then
  select "Delete".
• Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"

Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.

NEXT:

[*]Reboot your computer into SafeMode. You can do this by restarting

your computer and continually tapping the F8 key until a menu appears.

Use your up arrow key to highlight SafeMode then hit enter.
IMPORTANT: Do not open any other windows or
programs while ewido is scanning, it may interfere with the scanning proccess:
[*]Lauch ewido(AVG)-anti-spyware by double-clicking the icon on your desktop.

[*]Select the "Scanner" icon at the top and then the "Scan" tab

then click on "Complete System Scan".
[*]ewido will now begin the scanning process, be patient this may take a little

time.
Once the scan is complete do the following:
[*]If you have any infections you will prompted, then select "Apply all

actions"
[*]Next select the "Reports" icon at the top.

[*]Select the "Save report as" button in the lower left hand of the

screen and save it to a text file on your system (make sure to remember where
you saved that file, this is important).
[*]Close ewido and reboot your system back into Normal Mode and post the

results of the AVG Anti-Spyware scan. And a new hjt log.
good luck mschroe919

I have a quick question, how do you do a new hjt log? Also I did not run the scan under safe mode, is that ok, or should I go back and re-scan? Also is it better to quarentine(sp?) something or to delete it. I didn't want to change the recommendations of the program so I just left all of the ones that were to be quarentined, quarentined. ——————————————————– AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 1:51:36 PM 2/21/2008 + Scan result: HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller -> Adware.180Solutions : Ignored. HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller.1 -> Adware.180Solutions : Ignored. HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CLSID -> Adware.180Solutions : Ignored. HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CurVer -> Adware.180Solutions : Ignored. C:\Documents and Settings\Eddie\Local Settings\Temp\__unin__.exe -> Adware.Altnet : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050444.dll -> Adware.Aws : Cleaned. C:\System Volume Information\_restore{E050D24B-5CE4-417E-A0BA-83D97396E408}\RP755\A0040098.dll -> Adware.BraveSentry : Cleaned. C:\System Volume Information\_restore{E050D24B-5CE4-417E-A0BA-83D97396E408}\RP755\A0040099.dll -> Adware.BraveSentry : Cleaned. C:\System Volume Information\_restore{E050D24B-5CE4-417E-A0BA-83D97396E408}\RP755\A0040100.dll -> Adware.BraveSentry : Cleaned. C:\Program Files\FileSubmit\Hentai\NNEZTX638.exe -> Adware.NewDotNet : Cleaned. C:\Program Files\Microsoft AntiSpyware\Quarantine\FA17B4D3-8F84-494D-9383-B443CE\5423CF6F-7B48-441D-A0E2-67FE99 -> Adware.NewDotNet : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048902.exe -> Adware.PowerScan : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048904.dll -> Adware.SideFind : Cleaned. C:\Program Files\Microsoft AntiSpyware\Quarantine\7BA0EC5D-217C-405D-A396-09E5EA\C28C179E-8FA0-4A35-807A-EC6D09 -> Adware.SpywareStrike : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050033.exe -> Adware.SpywareStrike : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050035.exe -> Adware.SpywareStrike : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050479.exe -> Adware.SurfAccuracy : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050480.exe -> Adware.SurfAccuracy : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\MiniBug.exe -> Adware.SuspectModule : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Temporary Internet Files\Content.IE5\6HRW1GBM\bridge-c18[1].cab/MediaGatewayX.dll -> Adware.WinAD : Cleaned. HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent -> Adware.Zango : Ignored. HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent.1 -> Adware.Zango : Ignored. HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CLSID -> Adware.Zango : Ignored. HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CurVer -> Adware.Zango : Ignored. [2536] VM_00840000 -> Backdoor.HacDef.mc : Cleaned with backup (quarantined). C:\Documents and Settings\Guest2\Local Settings\Temp\Temporary Internet Files\Content.IE5\Q9O36T2L\print_page,1,adriana_karembeu_neskolko_fotok_vysokogo_kachestva[1].htm -> Downloader.Agent.ij : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP319\A0048822.exe -> Downloader.Dyfuca.dp : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048900.exe -> Downloader.Dyfuca.ei : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048918.exe -> Downloader.IstBar : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048917.exe -> Downloader.IstBar.ij : Cleaned with backup (quarantined). C:\Documents and Settings\Eddie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8LMV012R\drsmartload_js[1].html -> Downloader.IstBar.j : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048903.exe -> Downloader.IstBar.jm : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048905.dll -> Downloader.IstBar.ms : Cleaned with backup (quarantined). C:\Documents and Settings\Eddie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OLY3CR2Z\gdnUS2218[1].exe -> Downloader.Small.ayl : Cleaned with backup (quarantined). C:\Documents and Settings\Jake\Local Settings\Temporary Internet Files\Content.IE5\QNYZWL6F\real[1].htm -> Not-A-Virus.Exploit.JS.RealPlr.t : Cleaned with backup (quarantined). C:\Program Files\Microsoft AntiSpyware\Quarantine\E5FBBBFC-0D8C-4106-82A4-16049F\79E5F267-C702-4226-9936-AC4113 -> Not-A-Virus.Hoax.Win32.Renos.ap : Cleaned. C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP322\A0050487.dll -> Not-A-Virus.Hoax.Win32.Renos.ap : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@homestore.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][1].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Adjuggler : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Adjuggler : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Adobe : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@advertising[1].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Clickzs : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@connextra[2].txt -> TrackingCookie.Connextra : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@hypertracker[1].txt -> TrackingCookie.Hypertracker : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Onestat : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@overture[1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@overture[1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Popularix : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@revsci[2].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@revsci[1].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@edge.ru4[1].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed]-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Sexcounter : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@sexlist[1].txt -> TrackingCookie.Sexlist : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Jake\Cookies\jake@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][1].txt -> TrackingCookie.Valuead : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Webtrends : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\eddie@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Guest2\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Jake\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Guest2\Cookies\guest2@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Eddie\Local Settings\Temp\epmkdpfd.exe -> Trojan.Dialer.ay : Cleaned with backup (quarantined). C:\Documents and Settings\Eddie\Local Settings\Temp\kfchldld.exe -> Trojan.Dialer.ay : Cleaned with backup (quarantined). C:\Documents and Settings\Eddie\Local Settings\Temp\lcckbgod.exe -> Trojan.Dialer.ay : Cleaned with backup (quarantined). C:\Documents and Settings\Eddie\Local Settings\Temp\npmbhged.exe -> Trojan.Dialer.ay : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E050D24B-5CE4-417E-A0BA-83D97396E408}\RP757\A0040158.exe -> Trojan.Dialer.ay : Cleaned with backup (quarantined). C:\xz.bat -> Trojan.KillProc.a : Cleaned with backup (quarantined). C:\WINDOWS\SYSTEM32\1024 -> Trojan.Small : Cleaned with backup (quarantined). C:\Program Files\Sddjf\Fzany.exe -> Trojan.Small.cy : Cleaned with backup (quarantined). C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP321\A0048901.exe -> Trojan.Small.cy : Cleaned with backup (quarantined). ::Report end

Hi edward005, I would like a new HJT log, do it the same way you did the first: Like this: Go to C:\Program Files\Hijackthis\HijackThis.exe click on HijackThis.exe and then click on do a system scan and save a log file then copy and paste the new log here good luck we got work to do. Yes its okay you didn't do it in safe mode. there will be others later. Yes it is best to keep them in quarentine for now. Some times a bad one hook up to a needed file so we will get rid of them later. Good luck mschroe919

Hi edward005, Just wondering if you still want help, let me know mschroe919