tetonbob

Hi hplus10 -

No bad intent or sarcasm was felt here....I was just letting you know what we need to help you...I apologize back to you if I came across as anything but trying to get the information needed to help you.

We still need a fresh HJT log, so that we may see what is left in your system. IF possible, do any further communication and downloads required from another system, so that the infected one can remain disconnected untill we get you clean and more secure.

Also, please do the following:

Download StartDreck http://www.greyknight17.com/spy/StartDreck.zip

Unzip to its own folder and start the program:
Press 'Config'
Press 'mark all'

Uncheck the following boxes only:
System/Running Process -> List Modules
System/Drivers -> NT Services
System/Drivers -> NT Kernel- and FS-drivers
Press 'OK'

Press 'Save' and select the location to save the log file (default is the same folder as the application)

Post the log in this thread.

Right click on http://www.silentrunners.org/Silent%20Runners.vbs and choose Save As...Save it to your Desktop. Make sure you have disabled any programs that may block/disable scripts (ex: Ad-Watch, TeaTimer, Norton, etc.). Double click on 'Silent Runners' to run it. This will take a few minutes. It will create a file called 'Startup Programs' followed by your computer name and current date. Open up that file and post all the contents here in your next post.

Cheers,

TB