Since it doesn't want to go away peacefully, we'll have to use a bigger gun.
Open
notepad and copy/paste the text in the quotebox below into it:
Code:
Folder::
D:\WINDOWS\system32\crunner
D:\Documents and Settings\xxx\Local Settings\Temp
Save this as "
CFScript"
Refering to the picture above, drag CFScript.txt into ComboFix.exe
When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.
__________________
Question - what have you done for the community today?