Originally Posted by
omniconn 
found these and I use my ZoneLab firewall to block them ...
Yes, but you're still infected. Those two randomly-named .exe files that HJT found are just a couple of components of a larger malware infection, other pieces of which may still be active.
You should probably start a new thread of your own, post a full new HijackThis log in that thread, and we'll take the removal/disinfection process from there.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing
Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.
However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.