[Rahful]

Could anyone help me here? Picked it up with avast.

[mrdaveyk]

decompressions bombs are files full of info, like a zip file

[evilfantasy]

C:\System Volume Information

That is a system restore point which is why it can't be scanned.

Flush the System Restore Points to stop this from happening.

• Go to Start > All Programs > Accessories > System Tools > System Restore
• Select Create a restore point, and click Next.
• Next, go to Start > Run and type in cleanmgr
• Select the More options tab
• Next to System Restore click Clean up...

This will remove all restore points except the new one you just created.

[Rahful]

Awesome, thanks evilfantasy!

[evilfantasy]

No problem.

If you want to post a HJT log I will take a look to ensure everything is in order.

Download and rename HijackThis (HJT)

• Double-click on HJTInstall.
• Click on the Install button.
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
• Upon install, HijackThis should open for you.
  • Close HijackThis and rename it.
  • Go to C:\Program Files\Trend Micro\HijackThis.exe
  • Right click on HijackThis.exe and select Rename.
  • Type in sniper.exe and press Enter.
  • Right-click on sniper.exe and select Send To > Desktop (create shortcut)
• From the desktop open HiajckThis.
• If using Windows Vista, be sure to Run As Administrator
• Click on the Do a system scan and save a log file button
• HijackThis will scan and then a log will open in notepad.
• Copy and then paste the log in your post.
  • Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Even though we have renamed HijackThis to sniper, we will still refer to it as HijackThis or HJT.

[Rahful]

Thanks for the help, I might look into that a little later.

You seem to be much more knowledgeable then myself.. Could you check the other thread I made? I'm having serious problems in the sound division of my computer.

Thanks again.

[evilfantasy]

The HJT scan only takes about 5 seconds to run.

I dropped an answer in the other post.