What happened, no files has been replaced. It looks like rootkit is preventing replacement. We need to try to do it in some other way. Let's see, if we can look at your computer booting from an external source. You will need USB flash drive to move information from bad computer to a working computer. You need to download two programs. First ISO Burner this will allow you to burn REATOGO-X-PE ISO to a cd and make it bootable. Just install the programm, from there on it's fairly automatic (Instructions) Second Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 270.3 MB in size so it may take some time to download. When downloaded double click and this will then open ISOBurner to burn the file to CD Reboot your system (Non working computer) using the boot CD you just created. Note. If you do not know how to set your computer to boot from CD follow the steps HERE Your system should now display a REATOGO-X-PE desktop. Double-click on the OTLPE icon. When asked Do you wish to load the remote registry, select Yes When asked Do you wish to load remote user profile(s) for scanning, select Yes Ensure the box Automatically Load All Remaining Users is checked and press OK OTL should now start. Change the following settings Change Drivers to All Change Registry to All Under Custom Scan box paste this in: netsvcs %SYSTEMDRIVE%\*.exe /md5start redbook.sys eventlog.dll scecli.dll netlogon.dll cngaudit.dll sceclt.dll ntelogon.dll logevent.dll iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys nvrd32.sys symmpi.sys adp3132.sys mv61xx.sys userinit.exe explorer.exe /md5stop %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles %systemroot%\Tasks\*.job /lockedfiles %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav Press Run Scan to start the scan. When finished, the file will be saved in drive C:\OTL.txt Copy this file to your USB drive. Please post the contents of the C:\OTL.txt file in your reply.