Okay, so I'm having a *censored* of a time with my girlfriend's computer. When you try to log on normally, the background shows that there was some sort of problem. That eventually goes away, with a background replacing it that says, essentially, "You have spyware on your computer. If you want to get rid of it, GO to (website)." All the while, there are a ton of messages about different processes trying to read memory locations and failing. I'm pretty sure that these processes are not normal start-up processes. Then, if I try to open anything, what was her background covers the entire page. You can't open up the Windows tab or anything. And when I try to open the task manager, it says, "This is prohibited by your administrator." But she has the only account on the machine.

So that is what the problem is. There is some sort of malicious software that has wreaked havoc on her computer. Luckily, I was able to start the computer in safe mode and get all the files she needed off using the command prompt. The last thing I have to do is to get the computer BACK to it's original factory settings, and then I can load her files back onto the computer. The problem is that the recovery partition (D:) doesn't seem to have anything on it... I'm hoping that when she brings over whatever she has for her computer that she has some sort of boot disk, but at this point I'm not sure how to rid her computer of this crap.

So, my question is this: what sort of other options do I have at this point?

Also, when I start the computer in REGULAR safe mode (not the command prompt), I also see another user by the alias of "Administrator". My guess was that this user is causing the problems, since my girlfriend's account was the only account in regular mode, and therefore she could not be stopping herself from opening the Task Manager. I easily logged into the Administrator account, and then I was able to open the Control Panel and create another user so that I might be able to delete the Administrator account. When I log onto either one of the other accounts in safe mode the control panel refuses to open.

I'm GUESSING it might be easiest to just delete all files that were created within the last couple of months, but I don't know how to do that. Anybody have any other ideas?Get a back up OS or a new disk and Format that thing!well, atleast we can try.
download avira
http://www.free-av.com/
S&D
http://www.safer-networking.org/en/index.html
in safe mode, install, update, scan..
If you able to do that, sure something positive will come I think you have a heavy heavy spyware / vundo / addware / virus issue........

Im no virus expert but you have some issue here worth posting in the virus section .....

Tony