I removed PSguard with a combination of spybot/adaware and hijackthis. After running these programs again (along with AVG) the system appears clean.
When starting in normal mode only the desktop wallpaper is displayed following a message telling me that "application failed to initialize explorer.exe"
I ran the fraudsmit program offered elsewhere on these forums by noahdfear, which identifies an infected wininet.dll, but it cannot find a clean file to replace it with. I attempted to replace it with a version from an XPSP1 disk but it now tells me that the file is a bad image and I am to check my source.
Before I go any further I thought I would check with an expert.
Should I take a copy of wininet.dll from my own PC (XPSP2 also) and place it on that machine or is the file particular to the environment it comes from?
I am usually pretty adept at clearing these problems, but admit to being a little stuck on this one.
Thanks in advance guys (and gals if applicable)
Dave