sUBs

Reboot to Safe Mode

Enable the viewing of Hidden files

1. Open Windows Explorer
2. Go to Tools>Folder Options>View tab.
3. enable the option for `Show hidden files and folder´
4. disable the option for `Hide file extensions for known types´
5. disable the option for `Hide protected operating system files´
6. click "Yes" to confirm & then click "OK"

Locate and delete the following file(s), if present:

• C:\Program Files\screen savers\fdnmoss.exe
  C:\Program Files\screen savers\Spider-Man3DSetup.exe
  C:\Program Files\TGTSoft\style xp\eclsxp13.exe
  C:\Program Files\themes\reddragonvs.exe
  C:\WINDOWS\Resources\Themes\65924.exe
  F:\programs\BLIND WRITE\BlindWrite v5.2.12.146\Internet Explorer Security.exe
  F:\programs\BlindWrite v5.2.12.146.rar
  F:\programs\clone cd\Keygen.exe
  F:\programs\CloneCD.v5.0.0.0.Final.Keygen-TSZ\CloneCD.v5.0.0.0.Final.Keygen-TSZ.zip

~~~~~~~~~~~~~~

Reboot back to Normal Mode

Download Trend Micro™ Anti-Spyware for the Web Utility (by clicking the "Scan and Clean your PC" button).

• Save it to your desktop.
• Double-click the new icon on your desktop (tmas-web-scan.exe)
• It will say "Loading TrendMicro definitions".
• Once the definitions are loaded, the program will appear to close then re-open.
• Click "Start Scan"
• After it's done scanning, click "Scan Results"
• Make sure all items found have a check next to them, then click "Clean Threats Now".
• Click Exit.

Reboot your computer. In place of the TrendMicro icon will be a text file called "Antispyware.log", please double-click that log and copy the entire contents and paste them here.

I would also like a fresh copy of HJT log along with the log created by the TrendMicro tool