Thacky

It says, 'PendingFileRenameOperations Registry Data has been removed by External Process!' Umm. Yeah. I clicked 'ok' and the window that had popped up, closed. Nothing else happened, so I just closed Killbox. Any other ideas?

Edit: Nevermind.

Nope, it's still there. Sorry about the file name, I hadn't noticed. Anyways, here is my new HJT. Logfile of HijackThis v1.99.1 Scan saved at 10:03:01 AM, on 2/25/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\Brmfrmps.exe

Volume in drive C has no label. Volume Serial Number is B46B-DBF7 Directory of C:\Documents and Settings\MY NAME\My Documents\My Music 02/24/2006 07:29 PM <DIR> . 02/24/2006 07:29 PM <DIR> .. 05/23/2005 11:08 PM 4,708,366 01-incubus-megalomaniac.mp3 02/20/2006 09:29 PM 120,261 7 Soccer Moms - WWW.EROTRIX.NET - removed 02/12/2006 05:00 PM <DIR> Aerosmith 01/29/2006 12:13 AM 1,338 AlbumArtSmall.jpg 12/18/2005 11:52 AM 11,915 AlbumArt_{016BE595-FCC3-48E2-86C3-AF6F28258CF8}_Large.jpg 12/18/2005

Ok, Matt, I followed your instructions, but when I ran HJT, the file C:\Program Files\ProSiteFinder\ProSiteFinder.dll (file missing) wasn't there. When I booted into safe mode, the files C:\WINDOWS\ptcore.exe and C:\WINDOWS\system32\6f9b7p4h.exe were not there. I did delete the folders C:\Program Files\Zsov and C:\Program Files\ProSiteFinder, though. Here is my new HJT log. Logfile of HijackThis v1.99.1 Scan saved at 9:17:41 PM, on 2/22/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\s

Ok, I tried KillBox, but when I browsed for the file path and selected the picture, nothing happened. No text entered the box. Help? Wait, I'll try that. Thanks Matt.

Ok, I'll be upfront, I downloaded a porn picture with Limewire, but I'm in way over my head. I need help, bad. The file WILL NOT delete. When I right click it, it gives 5 options. They are: Preview, Edit, Print, Open With..., and Send to. I have tried preview and edit. When I do edit, absolutely nothing happens. In preview, it opens it up like it would show me the picture, but there isn't one. Just a white screen in the Windows Picture Viewer thing. I need help really really bad. I already tried the programs Eraser 5.3 and Gipo@MoveOnBoot, unsuccessfully. With MoveOnBoot, it said that the

I did all of that, but O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto isn't there. Here is the new logfile, I didn't delete anything from the scan. Logfile of HijackThis v1.99.1 Scan saved at 6:33:08 PM, on 2/3/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\syste

Ok, I ran Ad-Aware and I have the worm Win32.P2P-Worm.Alcan.A So I downloaded HijackThis and saved my log. Here it is: Logfile of HijackThis v1.99.1 Scan saved at 1:59:23 PM, on 2/3/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\sy