Same Problem
I have almost the exact same HijackThis result as you did. I deleted all the 04Run files, but I also have a few 04Startup items that show those four infected things. Should I delete those too? And how do I locate/destroy the sp.tmp, KERNEL32.VBS, install.js, and NewDotNet stuff? I...