The problem is/was you were hit by one of the numerous "drive-by" web pages that install trojans or malware on computers. One of the files that they may have installed is "XFST.SYS"
Only there is another file that is polymorphic or changes it's name with each reboot, or changes it's name with each time it runs. This checks to see if "XFST.SYS" is there and then re-installs it if it is not.
I have removed several of this type of polymorphic trojans or malware with some difficulty. The only two tools I used for removal were autoruns and processexplorer available through microsoft
( link: http://technet.microsoft.com/en-us/s...s/default.aspx
) and some computer common sense. I then checked to see if they were removed with ad-aware and spybot. Those themselves can not or could not at the time
, remove the core polymorphic file. But since the computers that had these were in the September 2008 time frame, Lavasoft's program or spybot (search & destroy) may now work
It ain't easy and if you really don't know about computers or software, it's totally impossible.
If Mark is unable to help because of distance or he gets bogged down with regular duties, you may consider enlisting the help of a computer type person locally. One that is a computer type and not a game player type. Spybot Search & Destroy
, ( link: http://www.safer-networking.org/index2.html
) a FREE
program, may have prevented this.
I seriously wish you luck with it.