I ran the 8 part system and am posting the logs. Thanks for any help.
No real issues noted what is the problem?
I had one of the fake virus protection malware. It would pop up consistantly. I found were it was running and disabled it then cleaned the system. But on another forum there was talk that small packets could regenerate the thing again. Thanks.
Well it has not yet!
So take a look with a special tool!
Get it here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Or here: http://subs.geekstogo.com/ComboFix.exe
Double click combofix.exe follow the prompts.
Install Recovery Console if connected to the Internet!
When finished, it will open a log.
Attach the log and a new HJT log in your next reply.
Note: Do not click combofix's window while its running. That may cause it to stall.
This should finish us up, but get me the logs!
I tried to down load from each site. when it is finished it reads "you can not rename combofix" then when I hit ok its gone. I don't think it installed. I diabled my virus scan. Is there another conflict?
Instead of run, I will try to save it then open it.
That worked. Here is the log. Thanks a million for your help.
Rename ComboFix to 1cfix and run it again, it did find some baddies and says it removed them but we need to confirm that.
Post its log then do the below..
D/L DrWeb Cureit: http://www.snapfiles.com/get/cureit.html
Reboot to Safe Mode and run it. This will take a while but worth it!
logs hijackthis and clean fix file
OK looking good so far!
So you are moving on to Cureit?