darkwatchet,

You should at least see an improvement. That has removed a ton of junk. However, we need to weed out the additional malicious entries and the remainder of that TDSS Rootkit



Next, lets download ComboFix.exe. This will give me a better view to the files running, those that are hidden, and also those in the registry..Please download from one of these webpages .

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
Combofix -> Anti-malware Tools -> Downloads


* IMPORTANT !!! Save ComboFix.exe to your Desktop


Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools.

Double-click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Recovery Console can be installed from your disc if you have Vista if you wish.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.





Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:





Click on Yes to continue scanning for malware.

When finished, it shall produce a log for you. Please include the ComboFix.txt in your reply.

Thanks, will do. Just off to watch football (soccer) game - I am a season ticket holder (with my wife) at the English Premier League new boys BURNLEY FC, so it will probably be tomorrow.

Thanks again for your help,
David

Done that now Chris, here is Combofix text

thanks, David

Hey there Darkwatchet,

How did the game go? Unfortunately I will be unable to check in with you so, I have PMed the rest of the Security Staff to ask for reinforcements. Someone should be along shortly. Thanks for your patience.

We lost!

Hello, is anybody there?

'Crush' was helping me with a problem but has gone. He said someone would be with me shortly - but that was last week, so I wondered if someone had forgotten me,

Regards,

David

http://www.pchelpforum.com/progress-...lp-please.html