[evilfantasy]

No but we will fix them.

Delete these files/folders, as follows:

* Open notepad and copy/paste the text in the quote box below into it (all except the word QUOTE):

File:: C:WINDOWSsystem324431.lps C:WINDOWSsystem323657.lps C:WINDOWS0x57.exe C:WINDOWSsystem32spoolc.exe C:WINDOWSsystem32driversctl_w32.sys Registry:: HKEY_LOCAL_MACHINEsystemControlSet001Servicesctl_w 32

* Save this as CFScript on the desktop.
* Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



* ComboFix will begin to execute, just follow the prompts. After reboot (in case it asks to reboot), it shall produce a log for you. Post that log (Combofix.txt) in your next reply.

Note: Do not mouseclick combofix's window while it is running. That may cause your system to hang

Post a new HijackThis log and the combofix.txt log in the next post please.

[Aliveamongdead]

here's both my combofix log and hijack this log.

[evilfantasy]

Is this a different computer?

[Aliveamongdead]

No its the same computer....y?

[evilfantasy]

OK, I see what I was missing, we need to run this scan, something doesn't seem right, I could be wrong but it is better to be safe and it will only take a second.

Please download FindAWF by noadfear:
http://noahdfear.net/downloads/FindAWF.exe

Save the file to the Desktop
Double-click the FindAWF icon.

If a Security Alert shows, allow the program to run.
As instructed, press any key to continue.
Use the following option: Press 1 then Enter to scan for bak folders
The scan may take a while, please be patient.

When done, a text file, Find AWF report is produced.
Please attach the Find AWF report in your reply.

[Aliveamongdead]

here is the awf log.

[evilfantasy]

Everything looks OK.

Is the computer still acting up?

[Aliveamongdead]

computer seems to be working fine. thanks soo much for your help!!! is there anything that i can d/l to make sure this doesnt happen again??

[evilfantasy]

Yes there are some closing steps.

Delete FindAWF and its log.
Delete any hijackThis logs.

There are many free programs in This Post to help tighten security on your computer.

Go to Start > Run and copy and paste next command in the field:

ComboFix /u



Make sure there's a space between Combofix and /
Then hit Enter.

This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.

Let us know if anything else comes up.