Hey, my computer has recently gone haywire.
1) There is a file called 1.exe that keeps reappearing on my C drive.
2) Double clicking C/D from My Computer leads to some sort of autoplay and won't actually open anything (but I can open with right click)
3) My internet has problems connecting at times
4) My computer date keeps resetting to 2005, the time and day is right, but it resets to 2005.

I've been trying to fix it, I've run numerous spyware programs, I've tried hijackthis (although I don't know what it did, lol), I've tried to alter the date in the BIOS, which only worked temporarily, I've emptied temp files and have tried to delete 1.exe, but it just keeps reappearing! Any help would be greatly Appreciated

Also, just as a reference:

I use nod32 for antivirus and agnitum outpost for a firewall. I've run spysweeper and hijackthis analyzer, I've also tried going into windows/temp and windows/prefetch and deleting everything.

try these free cleaners:
ATF Cleaner http://www.majorgeeks.com/ATF_Clean...
Crap Cleaner slim (No Yahoo Toolbar)
http://www.majorgeeks.com/download4...

and then run this free scan http://www.spywareinfo.com/xscan.php
and remove all it finds

That's a good place to start

Hopefully my advice will help you...Please post back with your results....thanks

You may also want to use:
Spyware Blaster http://majorgeeks.com/download2859....
Spybot S&D (make sure to update and Immunize) http://www.majorgeeks.com/download....
Adaware SE http://www.majorgeeks.com/download5...

See if that helps in removing your problem

Hopefully my advice will help you...Please post back with your results....thanks

Here's what fixes this problem.

You've got a service starting up in the registry that needs to be removed. I had the same problem, but I didn't record the name of the service, I just removed it and it solved my problem.

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\

Then look for a service before the a's start (they're in alphabetical order) that is just a bunch of letter/numbers that doesn't make any sense, mine was like 5akze2a or something like that, and it's not the really long one's in brackets. It will just be about 5-10 characters long. If you expand that servie, you'll see under parameters that there is a directory under c:\windows\system32 and it will be starting a file with the same name as the weird service name you just expanded. Delete this entire service key, but make an export of it first just in case.

Reboot you computer and the time will be correct and the c: drive will open properly, it fixes both of those problems.

MrExacta -`

hi mrexacta,

i have this problem but i cant find the registry key you mention to delete. there is nothing at all random above the 'a' keys..so maybe its under a different name but its disguised. ive look through the majority of them and cant see anything about running a c:\windows\system32 file...

pls help if you can,
thanks!
-Lucas

Lucas,

When I had this problem, I was positive I had removed every single trace of any other spyware off of the computer, it had a clean HijackThis log in safe mode and none of the Spyware cleaners detected anything wrong with the system. This is why I ended up raw hunting the registry services, I had run out of ideas to fix that problem, and no one on the web managed to find a solution.

So before I do anything else, I'd make sure you have a clean Hijack log (from safe mode with HijackThis renamed > this is very important). Let me know what you find.

BTW, the best way to make sure you don't have any bad services starting up in the services area of the registry is to look each one up in google or compare them to a clean system.

MrExacta -`