We have a few isues and at this point I am not sure if it is because you are missing stuff. I would appreciate it if you would follow the directions very carefully, if there is something you can not complete, make me aware of it. I asked this:
Please try to descripe any symptoms of malware, add any comments you think will help. I am not in front of the computer, you are.How is the computer running now?
1) C:\Windows\System32\cpofilwr.exe <<< I need information about this file, make sure you can all files and folders a visiable for Vista:
http://www.xtra.co.nz/help/0,,4155-1...,00.html#vista
Upload that file to: http://virusscan.jotti.org/ and post the results. Here are two other scans if jotti is busy.
http://www.kaspersky.com/scanforvirus
http://www.virustotal.com/
2) O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com <<< did you put this item in the Hosts file?
3) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:
O4 - HKCU\..\Run: [smartchkwin] C:\Windows\system32\lcpmvono.exe
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
Close all programs but HJT and all browser windows, then click on "Fix Checked"
Right click Start > Explore and navigate to these files/folders and delete them if there.
C:\Windows\system32\lcpmvono.exe <<< delete that file
4) Open Hijackthis.
Click the "Open the Misc Tools" section Button.
Click the "Open Uninstall Manager" Button.
Click the "Save list..." Button.
Save it to your desktop. Copy and paste the contents into your reply.
Post that uninstall list and a new HJT log and the information from the file scan.
Please tell me how the computer is running now.
Thanks