[Chromo]

all i found was winlogon with no icon

[Advertisements]

So the only thing inside the WinSxS folder is a file with the name of Winlogon.exe?

C:\WINDOWS\system32\WіnSxS\winlogon.exe<-- Delete that file if it still exist.

Use Pocket Killbox-> Delete on Reboot if necessary.

[Wizard]

So the only thing inside the WinSxS folder is a file with the name of Winlogon.exe?

C:\WINDOWS\system32\WіnSxS\winlogon.exe<-- Delete that file if it still exist.

Use Pocket Killbox-> Delete on Reboot if necessary.

[Chromo]

alright, i deleted the file.

[Wizard]

Run one more Online Scan here
http://support.f-sec.../home/ols.shtml

Post any results you get.

Please Install these 2 to add to the Security of the PC!

SpywareBlaster:
http://www.javacools.../downloads.html
Update Immediatly!

WinHelp2002 Hosts File
http://www.mvps.org/...2002/hosts2.htm

Disable System Restore
http://service1.syma...src=sec_doc_nam

Go ahead and Reconfigure Msconfig the way you like the PC to Startup

Go ahead and remove any of the tools downloaded that are of no use anymore

Post back and let me know how things are?

[Chromo]

Finished: 8 viruses found

Scanned files: 217054 Warning: 8 file(s) still infected!


C:\!KillBox\dedi.dll Trojan.Win32.StartPage.vr

C:\!KillBox\i386p.sys SpamTool.Win32.Mailbot.w

C:\!KillBox\mchschap.exe Trojan.Win32.Crypt.t

C:\!KillBox\mdwrm.exe Trojan.Win32.Crypt.t

C:\!KillBox\setfgi.dll Trojan-Downloader.Win32.Agent.fc

C:\!KillBox\ssysprs.dll Trojan-Downloader.Win32.Agent.fc

C:\!KillBox\swmrdpdr.sys Rootkit.Win32.Agent.ao(?)

C:\Program Files\Microsoft AntiSpyware\Quarantine\C354EA9E-C068-456E-891D-E0D327\9771525F-80B5-44B0-BC24-B1E4FA Trojan-Downloader.Win32.PurityScan.at


my system seems to be running smoothly now, the first step probly fixed most of the problems