Hi Whocares,

Thanks again for your reply, and yes your educated guess is correct.

(1) I have wsock32.dll, kernel32.dll and command.com in my (Avast) system files entries. Is this normal? I know what wsock32.dll, kernel32.dll are but I have no idea what command.com is? Is that related to the normal command???

(2) Yes the PAGEFILS.CSP is where crypto was found and it was to large to send via e-mail.

One of the last scan came up with a corrupted file Jet623.tmp then my PC re booted with no warning… I ran a search on my PC and there are many Jet***.temp in my windows temp folder and I have tried to delete them (also delete on next boot up) and get the error of access denied.

The last full scan (Avast) and also the aswclnr.exe(CleanerPack) that I have done came out clean… so fingers crossed…

Take care
Shazza