here is my log from high jack this

[jholland1964]

I don't think you need Windows Defender. Really believe other programs are better. You have SAS, MBA-M, will install SpywareBlaster. Those will suit you fine I believe.
When you can come back with your other questions and I will be happy to do what I can to answer them. Have fun at the wedding.
Judy

[cauzomb]

don't forget about npdeployJava1.dll it's either a legitimate, but not needed java deployment feature, or it's malware... either way, it's better to be safe than sorry..

Honestly, you only need to manually download the latest java plugin from sun.com for your browser version, rather than the automated stuff that you have now.. java update schedualer... it runs all the time in the background taking up resources..

here's a quote from zimbio on how to remove the Java deployment kit files..

The Java Deployment Toolkit files are located in C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll and C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll. Users of 32-bit editions of Windows need to remove the (x86) part of the url so that they end up with C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll and C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll.

It is now time to close the Firefox web browser and open the plugin locations in Windows Explorer. The plugins can simply be deleted in their folders which will also remove them from running as plugins in the Firefox web browser. Cautious users might want to back up the files first before they remove or delete them from the directories.

Some more information about this issue http://secunia.com/advisories/39260

[jholland1964]

Sorry, am going to have to disagree here concerning cauzombs post.
You currently have the most recent version of java which is 6 update 21. This alert concerned version 6 update 19 and the solution given is to update to version 6 update 20.

My feeling is leave it alone. Get rid of the automatic sheduler and updater as stated earlier and do your updates manually but otherwise my advice is leave well enough alone.

[keper]

Hi Judy Just got back from the wedding .I have a few questions for you one being what programs need to be on start up. 2 Being how did you know from combofix and highjack this what was wrong with my computer. I know how combofix works or what it does, but how did you know by the log and where to go to fix it. By the way spyware blaster is installed on the computer . Mike lin`s program is great. Thanks for your help Keper

[jholland1964]

I know how combofix works or what it does, but how did you know by the log and where to go to fix it.

The two bad files showed in HiJackThis autostarts and they didn't belong there, they weren't connected to any program, they were just listed as auto starts. They were unknowns as far as normal start ups. So that gave the first indication those two were probably bad.

combofix isn't an easy log to read. It has taken me quite awhile to feel confident that I know what I am seeing is wrong or not. Each and every line has to be read and checked to see if the file is legitimate, if it is located in the correct place, is it connected to something other than what it normally would be connected to. Also the time stamp next to the entry, many times a person will say in their post, "I did such an such yesterday afternoon and suddenly..." Well you can look at the times noted and very often you will see one thing that happened yesterday after noon and then you know.
The task scheduler I noticed because of the files listed in there, two of them were the two we knew were likely the infections. They were scheduled to run each time the computer booted up. So, take them out of the scheduled tasks and that meant those two wouldn't start up at boot time and they could then be removed. I discovered something like this a couple years ago working on a friends Vista computer. First time I had used Vista so that was an adventure in itself. Had a trojan that just kept coming back. Exploring Vista I found the task scheduler and there was our trojan, set to start at boot time and download new files every 10 minutes. Cleaned out task scheduler and then I could remove the trojan entirely. It was an accidental discovery then but now I try to look through the scheduler every time if possible.
Just something that takes study and checking and re-checking. It isn't fool proof either but line by line is what must be done.

By the way, you do need to set a new, clean System Restore point.
To do this Right Click My computer.
Choose Properties
When System Properties opens choose the System Restore Tab.
Place a check mark in Shut down System Restore.
You will probably get a message telling you it will be shut down, click ok or yes.
Allow it to shut down.
Wait a moment. Then go back in and take that check mark Out so that System Restore will turn back on.

[keper]

Hi Judy Thanks for all the help and time you have put into helping out with this problem.Thank you to Cauzomb I appricate all the help you have giving me too.It proves that there is still some good people in the world. By the way can you tell me what programs are supposed to be on the computer on start up. Thanks Keper

[jholland1964]

What you now have in startup would be what you would need. Lots of programs add themselves to start up when they aren't needed. That's why you need to keep an eye on them. Just check in Mike Lin's if you add a program and see if it put itself in there. If it does, just take it out.

[keper]

thanks for all your help i am sure i will be back someday but until then thanks .............keper

[jholland1964]

Really happy to help and you did a super job! Keep away from that P2P stuff too! That will get you into trouble everytime.
When you want to download software go to the HOME PAGE of the creator to get it, not some torrent site either.