i ran combofix and it got rid of some things, now avg has found some Trojans, it healed two of them but one JS\psyme virus is still there in the content ie 5 folder im going to see if i can get rid of it now, any other ideas to get rid of it? i was able to move it to the virus vault though
edit i found this strange file in HJT
O4 - HKLM\..\Run: [{7E-EC-CA-AA-DW}] C:\WINDOWS\system32\kowdw64m.exe DWmhst
google turns up as nothing but it looks odd