thank you, i did have two winlogon's running, both were system accounts. i changed an account to non-admin, rebooted and checked again. only one...
posted before and deleted the recommended files. i am still infected. i can find and delete the .dll and all the registry keys but i can't stop...
i followed the steps and ran ad-aware. here is my log from highjackthis: Logfile of HijackThis v1.97.7 Scan saved at 12:18:25 PM, on 4/24/2004...
Separate names with a comma.