Seems it want to stay.....

Please download The Avenger to your Desktop and unzip it.
Copy all the text contained in the code box below ( including the words "folders to delete" ) by highlighting it and right clicking and selecting "Copy"

Now, start The Avenger program by clicking on its icon on your desktop. Look under "Script file to execute" and click on "Input Script Manually". Next click on the Magnifying Glass icon and a blank dialogue box will open called "View/Edit script". Position your mouse inside the box, rightclick and choose Paste. All the text above in the code box should now appear there. Click Done and click on the Green Light to begin execution of the script. Answer "Yes" twice when prompted.
The Avenger will restart your computer. (if the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
When you have rebooted, a black command window briefly opens on your desktop, this is normal. A logfile will be created that records all actions that The Avenger performed. This log file is saved to C:\avenger.txt. The deleted files will be backed up and saved to C:\avenger\backup.zip.
Once your computer has rebooted, please post back the contents of C:\avenger.txt, a new Hijack This log.

Attached find the avenger log and the hjt log but I think whatever it is, is still there. The screen is still doing a "shudder" where the desktop symbols on the screen move slightly.
Hopefully this has done though.
Thanks for your patience

Attached Files

	avenger.txt (1.4 KB, 1 views)
	hijackthis.log (11.1 KB, 1 views)

Sorry.My fault.I left the exe file in it last time.Can you run Avenger again please.

Copy all the text contained in the code box below ( including the words "folders to delete" ) by highlighting it and right clicking and selecting "Copy"

Now, start The Avenger program by clicking on its icon on your desktop. Look under "Script file to execute" and click on "Input Script Manually". Next click on the Magnifying Glass icon and a blank dialogue box will open called "View/Edit script". Position your mouse inside the box, rightclick and choose Paste. All the text above in the code box should now appear there. Click Done and click on the Green Light to begin execution of the script. Answer "Yes" twice when prompted.
The Avenger will restart your computer. (if the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
When you have rebooted, a black command window briefly opens on your desktop, this is normal. A logfile will be created that records all actions that The Avenger performed. This log file is saved to C:\avenger.txt. The deleted files will be backed up and saved to C:\avenger\backup.zip.
Once your computer has rebooted, please post back the contents of C:\avenger.txt, a new Hijack This log.

I attach the revised logs as requested. It is a process deleting these invaders,thanks for your assistance

Attached Files

	avenger.txt (1.1 KB, 1 views)
	hijackthis.log (11.0 KB, 1 views)

Ok.Thats it.all done all clean.


This will clear away any of the files and folders that were created by ComboFix.
Go to :
Start > Run then copy and paste the following highlighted text below and click OK.

Pancake
Thanks for all your help. I have removed combofix as directed. What should I do with avenger?
Also the desktop symbols still shudder occasionally, is this OK!
Brendan