It's ok, if these aren't found or 'error' out. If you want, just copy and paste the individual lines to the command prompt to save on the typing.
Before we begin, let's move HiJackThis to it's own folder; like c:\HJT. When we're done 'cleaning' off your system, we're going to 'flush' the temporary folders which, with HiJackThisin it's current location, we'll lose both the program and the backups it creates. These backups are important in case we need to restore any 'fixed' entry(s) later.
Also move the "Backups" folder, for HiJackThis, if present.
Run HiJackThis and click "Scan", then check(tick) the following, if present:
C:\windows\system32\IXVnZ.exe C:\WINDOWS\system32\fast.exe C:\Documents and Settings\David\Application Data\eetu.exe C:\Windows\System32\wsaupdater.exe C:\windows\system32\6ypz.exe C:\WINDOWS\System32\mhc.exe
Don't reboot your computer just yet! Check for the presence of "C:\WINDOWS\system32\userinit.exe" (make sure you can view hidden and system files/ folders). If it isn't there and you reboot your computer, you won't be able to log back on into your user account.
Post back a new log along with the results of the above file.
Message Edited by Midnight Star on 01-24-200502:56 AM