Hi nuttytuter,

I saw you had that installed from inside the HJT log you provided. In another similar cleansing routine this also helped towards the final solution of this (where it was an infected site update that was at the culprit of this issue). Anyway as it is not interfering in any way with essexboy’s cleansing routines I put that suggestion forward. On the other hand you should follow essexboys’ instructions to the dot, and after he is done, you might also need some additional crap cleaning and a check for corrupted system files, but that is for him to decide. This particular malware does not belong to the real easy ones to cleanse, but essexboy is a renowned malware cleanser, and everything will be OK,

polonus