Well, it’s not appearing to do anything (I hope). I’ll just stay out of my bank until he pokes his head in.
Hi ok winstart.bat appears whenever it feels like and then self deletes Hmmm we can look at the system to see if there is anything untoward and go from there if you wish
Autoexec.nt is a windows transient file and as such is not really a concern. It is a hangover from MSDOS and it should not appear in systems later than XP
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please copy and paste log back here.
[*]The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
If you’re worried about Keyloggers. A program you can use is Key Scrambler. That link is clickable. Wait until Essex is done helping before you modify your system though.
Michael, I would love your help when this problem is resolved. My knowledge is so obsolete as to be silly, I think. 
Essexboy… the log files are attached.
I got a message that an install file was missing and the proggy continued after I hit cancel. this may have to do with the delete of two files: Winzip or spybot. (both of which have been removed since this process began.
Nothing untoward there, however, I have noticed that the culprit for those files is sometimes associated with the ATI catalyst drivers as they try to cater for all windows flavours
Download the attached Fixlist.txt to the same location as FRST
Run FRST and press Fix
On completion a log will be generated please post that
fixlist log attached.
How is the computer behaving now ?
The computer appears to be behaving correctly, for the must part. But this morning these two files have shown up on one of the three home group computers.
I will run an avast scan and see what happens. Should these two files be gone or what should I expect?
I believe them to be harmless if they are associated with catalyst. Also any infection would show some symptoms
Wonderful! Thanks for the help. I will add them to my exceptions lists as acceptable.
I do appreciate all the time you have put into this for me. Thank you very much.
Not a problem
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article and this article.
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 