Delete these if still found:
C:\WINNT\system32\O
C:\WINNT\system32\wins
Restart. Does that wins folder still return in c:\windows\system32? If so, let's try running this scan also:
Make sure you turn off any antivirus programs you have running while performing the online scan below. Using Internet Explorer, run a virus scan at
http://www.kaspersky.com/virusscanner Click on 'Launch Kaspersky Anti-Virus Web Scanner' and install the ActiveX component from Kaspersky. Click Yes and it will begin downloading the latest definition files. Once that's done, click on 'Scan Settings' and make sure the following are selected:
Scan using the following Anti-Virus database:
- Extended
Scan Options:
- Scan Archives
- Scan Mail Bases
Click OK. Now under select a target to scan, select 'My Computer'. It will start and scan your system. The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected. Now click on the 'Save as Text' button. Save the file to your desktop. Copy and paste that information in your next post.