Hi evilfantasy. i'm from italy so i'm sorry for my bad english.
i dowloaded combofix as u suggested (i have the same problem of madcows7 - eula.1024.rft and 1025 etc. in a folder i dont know:G:\9f3883af79f05e81e6346bd2a0472c84) but COMBOFIX stops after about 10 minutes and it says :"DENIED ACCES". After it doesnt work anymore.
Please, have u any idea of what i should do?
Thank you in advance.

Go to Start > Run and type C:\ComboFix.txt then click OK. See if a log opens for you and post it here.

What problems are you having with the PC?

Download and rename < Link hidden. Register for free to see this link! > (HJT)

• Double-click on HJTInstall.
• Click on the Install button.
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe
• Upon install, HijackThis should open for you.
  • Close HijackThis and rename it .
  • Go to C:\Program Files\Trend Micro\ HijackThis.exe
  • Right click on HijackThis.exe and select Rename
  • Type in sniper.exe and press Enter
  • Right-click on sniper.exe and select Send To > Desktop ( create shortcut )
• From the desktop open Hijackthis.
• If using Windows Vista , Right-click and Run As Administrator
• Click on Do a system scan and save a log file
• Hijackthis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post .
  • Do not have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Note: Although we have renamed Hijackthis to sniper, we will still refer to it as Hijackthis or HJT.

Please post the entire Hijackthis log in the next reply.

Problems with my PC:
1) Sometimes mouse moves in other part of the screen (usually it goes on top of the screen).
2) I have folders i dont know (for example: 9f3883af79f05e81e6346bd2a0472c84) in a partition i usually keep only for files (not for OS) and recycle bin in every partition. I cant either copy and paste the directory, access denied.
3) Sound card (Creative Sound Blaster) is not working even if it is correctly installed.
I will post what u asked for as soon as possible.
See u.

In the attachment the log file from sniper/hijackthis.

I don't think it is a virus that is causing the problems you are having. There are a few deactivated items to take care of and then we can do some clean up and see if it helps. The 9f3883af79f05e81e6346bd2a0472c84 files could be temporary files created by windows or other software you use.

Open Hijackthis and select Do a system scan only .

Place a check mark next to the following entries: (if there)

• O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe (file missing)
• O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe (file missing)

Important: Close all windows except for Hijackthis and then click Fix checked .

Exit Hijackthis.

----------

We need to uninstall Combofix. It is a powerful tool and shouldn't be used unless under supervision.

• Click START then RUN
• Now type Combofix /u in the runbox
• Make sure there's a space between Combofix and /u
• Then hit Enter .

----------

Please download ATF Cleaner by Atribune. < Link hidden. Register for free to see this link! >

Make sure that all browser windows are closed.

• Under the Main tab, put a check next to Select All .
  Click the Empty Selected button. ( Note: if you remove cookies, automated login at forums and sites will be disabled. If you do not want this, uncheck Cookies )
• If you use the Firefox browser:
  Click on Firefox at the top and put a check next to Select All .
  If you would like to keep your saved passwords, click No at the prompt.
  Click the Empty Selected button. ( Note: if you remove cookies, automated login at forums and sites will be disabled. If you do not want this, uncheck Cookies )
• If you use the Opera browser:
  Click on Opera at the top and put a check next to Select All .
  If you would like to keep your saved passwords, click No at the prompt.
  Click the Empty Selected button. ( Note: if you remove cookies, automated login at forums and sites will be disabled. If you do not want this, uncheck Cookies )

Important: Restart the computer before continuing.

Caution! ATF Cleaner is a powerful tool and should not be used as an every day cleaner. Use < Link hidden. Register for free to see this link! > for a daily drive cleaner.

----------

Use the < Link hidden. Register for free to see this link! > to check for out of date software.
Out of date software has security vulnerabilities that malware can exploit.

• Click Start Now
• Check the box next to Enable thorough system inspection.
• Click Start
• Allow the scan to finish and scroll down to see if any updates are needed.
• Update anything listed.

----------

Let me know how things are now.