After I ran this my system appeared clean until MS rebooted the machine and the processes came back.ĪswMBR version 1. It is still installed, however, and I see its process. I also ran combofix which I know see I should not run before asking for help, here. I did a registry backup from regedit at this time. In getting to the bottom of this I have used Process Hacker, and Procmon - to do a bootup log which when I first tried it stopped by computer from booting (due to the sys file not being correct, and it being referenced in bootup from the registry to actually do its logging. I have since removed all Java installs so there is currently nothing. I suspect I got infected via an old Java that I did not realise was still there. they talk with a huge amount of IPs online which I take to be mail servers. As soon as a network connection is available, I see stack of cmd.exe (the standard location) with an empty command line and associated process fire off. I have a malware infection that I am 90% sure is email spamming. This are more difficult to me as this occurred when I am moving jobs and cities so my only net access is via the mobile phone which is pretty expensive. Thanks in advance, and I will be donating to this fantastic service.

I have read through the stickies so hope I get this correct.

Vmware thinapp wow64