Around 1 week ago, I got a redirect virus in both FF7.01 and IE7. As that was being removed by MBAM, FF automatically updated to 8.0.1 without my permission which it shouldn't have done. Many scans later, using TDSSkiller, I found win32.rloader.a and got rid of it. I kept doing scans to try and get rid of any other files on my PC which should go, but none were found. This morning there was a you tube link on my desktop which I did not recognize at all. Later, when I went to log into facebook and there was a log-in name in my dropdown menu which should not have been there. This appeared just after I had cleaned out my history. Today I did your step-by-step procedure but nothing was found. Tonight, I found desktop.ini actually on my desktop and it wasn't there before. Attached are my logs, I could not run root repeal on win7. I kept getting a "could not write" error. It was almost like it was looking for vista instead of win7. I will attach a HJT log in another post. Thanks for any help you can give me.