I want you to run HJT again.
Put a checkmark next to this entry;
O23 - Service: Plug and Play Device Manager ($sys$DRMServer) - First 4 Internet Ltd - C:\WINNT\system32\$sys$filesystem\$sys$DRMServer.e xe
When you have placed the checkmark then click the FIX button.
Reboot the computer.
Open HiJackThis and click on Config, then Misc Tools, and then press the Delete an NT service.. button. When it opens you should then enter this
$sys$DRMServer
Then click OK.
Reboot and run a new HJT scan and post the log.


Reply With Quote