It just started yesterday but I have beetles "eating" my icons and crawling around on my desktop. What should I do about this? Is it erasing everything?
That is a new on to me but sounds very interesting.
Lets start with seeing a log
Highjackthis Instructions
Make sure you have the LATEST version of HJT (currently v2.0.0.2) it can be downloaded from HERE
Run the HijackThis Installer and it will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe. Please don't change the directory.
After installing, the program launches automatically, select Scan now and save a log
After the scan is complete please attach your log onto the forums using the paper clip icon above your reply.
When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.
Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction
Combofix will automatically save the log file to C:\combofix.txt
Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
Double-click SmitfraudFix.exe
Select 2 and hit Enter to delete infected files.
You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt
While in Safe Mode scan with MBAM which was updated in regular mode
Im getting an error message saying You cannot rename ComboFix as ComboFix[1] please use another name,preferbaly made up of alphanumeric characters. I didn't try to rename it, it just poped up.