Here's the requested HJT log....Please Remove SmitFraud Core Service..

[Lynch]

and wheren is this file ??

Delete this file:

C:\WINDOWS\system32\0.7962458.exe

[Lynch]

Are you sure about emptying the Documents and Settings file- that's gonna delete a lot of stuff, all settings and all items on desktop ???

[Shaba]

Hi

"and wheren is this file ??

Delete this file:

C:\WINDOWS\system32\0.7962458.exe"

Go to C:\windows\system32 folder.

There should be either 0.7962458.exe or just 0.7962458 (without .exe)

"Are you sure about emptying the Documents and Settings file- that's gonna delete a lot of stuff, all settings and all items on desktop ???"

I didn't say to empty this folder:

C:\Documents and Settings

I said empty this folder:

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\

[Lynch]

OK, but I dont see this in there.

Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\

Under documents and settings/all users I dont see application data. spybot etc...
There's Desktop, Favorites, Shared Documents,Start Menu and NTUSER (Dat File)

[Shaba]

Hi

That is likely hidden.

Follow these instructions, please

Please make sure that you can view all hidden files. Instructions on how to do this can be found here:

How to see hidden files in Windows

And try again after that.

[Lynch]

Application Data is in Owner File and its a Symantec folder that's empty ??

[Shaba]

Hi

So there is no such folder as

C:\Documents and Settings\All Users\Application Data\ ?

[Lynch]

OK found it and deleted the files you said and emptied recycle bin. What's next ?

[Lynch]

theres now also a bunch of files "WRL' and "Thumbs" on desktop ??

[Shaba]

Hi

"theres now also a bunch of files "WRL' and "Thumbs" on desktop ??"

Yes as hidden files are visible now temporarily.

You can re-hide system & hidden files doing vice versa like instructed in link; they will go back hidden.

Do you have any problems left?