Hello again Sonya!
My apologies for the delay.
The smdat32a.sys files shows up in the C/Restore/? Should this be there?
The file smdat32a.sys is being found in system restore's cache, which is because you turned system restore back on while the file was still on your system, as instructed. It will be removed when we flush system restore's cache at the end of this fix.
Also, Should I empty the recycle bin after I delete files?
It definitely wouldn't hurt to do so, to clean out the malware that collects there throughout the fix.
Do you need a new hijack this file?
Yes please--your last HijackThis log was clean, and we're going to tidy up loose ends presented by Kapersky just now, and then all should be clean--but it doesn't hurt to check.
Restart to Safe Mode
Restart your computer, and repeatedly tap the F8 key (or the appropriate key for your system) until the menu appears. Select
Safe Mode from that menu.
Uninstall Programs
Click
Start -> Control Panel -> Add/Remove Programs and uninstall the following programs (if they exist):
Consumer Input
Do not reboot if prompted by the uninstaller.
Delete Files
Delete the following files indicated in
RED and folders indicated in
BLUE if they still exist.
D:\WINDOWS\SYSTEM\bde3dref3K7.dll
C:\Documents and Settings\M\My Documents\My Received Files\clipartfree.exe
D:\WINDOWS\pkzw400s.exe
C:\Program Files\Consumer Input\
Let me know if you can't find or delete them.
Restart to Normal Mode
Restart your system normally.
Logfiles Required
A fresh
HijackThis log
Are you having any further problems?