Here are the new logs.

Attached Files

	hijackthis.log (8.1 KB, 2 views)
	combofix.txt (12.9 KB, 3 views)

Ok.

Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O4 - HKCU\..\RunOnce: [winmz] C:\Documents and Settings\Owner\winmain.exe
O4 - HKCU\..\RunOnce: [sysinit] C:\WINDOWS\system32\drivers\system.exe

Reboot and post a new HJT log..

New log.

Attached Files

hijackthis.log (8.3 KB, 1 views)

Its being stuborn.One down,one to go....

Please download the OTMoveIt by OldTimer
Save it to your desktop.
Please double-click OTMoveIt.exe to run it
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):


C:\WINDOWS\system32\drivers\system.exe


Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post a new HJT log when done,

Here is the new hijack this log. Thank you.

Attached Files

hijackthis.log (8.8 KB, 1 views)

There is something stopping this from being removed and it has me stumped.....I take it you did download and install another ComboFix on C:\ drive. ?

Yes I sure did.....