Hi Lisa
You have a real nasty infection here. It's filenames change every time you reboot..so unless you KILL the files...in their current state....it regenerates again on your next reboot. I need you to post the following logs...and run the fix without rebooting the PC after the last tool..
Download this virus checker and tool from eScan
Mwav.exe (Use Link 3)
1. Save it to a folder.
2. Reboot into safe mode
3. Double click the
Mwav.exe file.
(This is a stand alone tool and NOT just a virus checker......so it won't install anything)
4.Select all local drives, scan all files, press
SCAN and when it is completed, anything found will be displayed in the lower pane.
5. In the Virus Log Information Pane......
Left click and
Highlight all the info in the Lower pane--- Use
"CTRL C" on your Keyboard to copy all found in the lower pane and save it to a notepad file
*Note* If prompted that a Virus was found and you need to purchase the product to remove the malware, just close out the prompt and let it continue scanning.
We are not going to use this to remove anything..but to ID the bad guys.
Once you copy that to a notepad file...highlight the text and copy it here.
Now...Download and run the next tool....but
DO NOT REBOOT after you run the tool and post it's log.
Download FindIt's.zip to your desktop:
http://forums.net-integration.net/in...post&id=142443
1. Unzip/extract the files inside to a folder on your desktop.
2. Open the folder and run
FindIt's.bat and wait for notepad to open a text file. It will take awhile so please be patient ...
3. Then post the results here please, along with the new HijackThis log and the Mwav log.