I'm willing to walk you through it,
LizbetThat stuff should not be coming back.
It is because something on your PC
is not right. Period.
OK, to do HJT is not frightening.
It is simply an
enumerator application meaning it illuminates certain things. ONLY.
It identifies typical areas of problems we experience due to bad software.
The warnings are because using it for deletions/corrections is system modifying.
There is a backup made when using it. So even mistakes can be remedied.
It is safe to follow the advice. We simply do not ask you to do radical things.
That said, HJT alone will often not do the job.
What you describe is an infection of files that
is protective of itself... it keeps coming back.
So, when you post a hijackThis log for analysis
you are saying exactly what you have said.
"I've tried anti-spyware & it hasn't been effective!"
You need someone(s) more expert advice.
We need to see the enumerator's output.
Then, we might need to see another log (or two)
Based on the data, which takes time to study/create
a "consensus" opinion after researching online
we offer step-by-step one-on-one procedures.
You and I enter into an agreement to see it through.
Sometimes it's best to leave your PC running while
the hours between posts mount up.
That would be in a case (like yours , probably) when
the particular problem is with "morphing" filenames.
It might get on your nerves.
Think of it as good medicine.
Strong measures being taken.
You might not need to do that, but until we see the HJT
and can react (slowly, most likely) in the best way,
I don't know of better advice to give you.
How To Post (and run) Hijack This to the right place