Personally I suggest, either a complete re-format. Or finding Hijack This and getting it to do a log of programs that start when the PC does. One of these will be your malware.
It looks like some other process is making sure the i386.exe remains there, and it then hooks GW. You're gonna need to find the culprit process.. Which Hijack This will help with.. or grab Autoruns from the Microsoft website (it does the same thing almost).
|