tetonbob

Thanks....this should take care of the rest of the items remaining....

I have attached a file to this post - paul.zip Download this file to your desktop. Double click on the zip folder, then double click on the reg file within. Click yes to allow it to merge into your registry.

-----------------------------------------------------------------------

• Double click on HijackThis.exe to run it.
• Click on Open the Misc Tools section
• click the button labelled "Delete A File on Reboot..."
• In the dialogue that shows up, enter the path (type, or copy and paste) of the file in "file name:" field C:\WINDOWS\system32\ggjlm.bak2
• When you have selected the file, Click the "Open" Button
• Click Click No at the next prompt
• Do that for the following files also.
• C:\WINDOWS\system32\mswmmqce.exe
• C:\WINDOWS\system32\ggjlm.ini2
• C:\WINDOWS\system32\mljgg.dll
• When you get to the last one, click Yes when HJT asks you to reboot.

-----------------------------------------------------------------------

It's very important for you to move combofix from a temp location. It needs to be placed on the desktop. Once you've placed it on the desktop, please run it once again, and post the log.

-----------------------------------------------------------------------

Also post a new HJT log.

How is your system behaving now please?