My sister-in-law asked me to take a look at her PC which was barely working. It was overrun with spyware and crap (she has four kids and no conception of safe computing). I have gotten rid of most of it, but I am running into one last problem: Every time the computer starts, it starts a service that I can't get rid of. The name is random and the file is created in a subdirectory of the \windows\system32 directory. Right now the service that gets started is named "envqykqbmmdi" and the executable that it runs is "c:\windows\system32\qbmmdi\evnqyk.exe". I have tried deleting the RUN and SERVICES entries from the registry, deleting the file from the disk, and nothing seems to work. Each time I restart, it is back again. I tried copying another .exe file into the directory and renamed it to evngyk.exe, which seemed to fool it, but then another directory, file, and service got created, with a different random name. Can anyone help? Thanks.

You have some spyware or adware. Download AdAware and/or Spybot Search and Destroy and do scans in Safe Mode after updating the program's definitions. Both programs are FREE. You can also look in Add/Remove Programs in the Control Panel. Some adware does list itself in there. AdAware SpyBot S&D WILL POST FOR FOOD.

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed. Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.