I've Had Problems with regkeys and trojans in the past three days.
First I Ran These Scans:

- Ad-Adare: Nothing Found
- Avg: Nothing Found
- Spybot s&d (could not update... trojan being naughty): Nothing Found
- HouseCall: Found several troj_se and ad_se
- Stop-Sign Threat Scanner: Found a VBS.Generic.278 in a file Postoobe.nec

What I Did:
- I deleted postoobe.nec
- the HouseCall Deleted all the stuff it found for me


Then I was able to update Spybot S&D and it found:
- 53 entries eAccelleration... Most of them RegKeys, In the stop-sign thread scanner!
- One Other Entry (i can't remember its name but it managed to fix.)

It fixed all entries except two, Because they were folders each containing an undeletable object. SOMEHOW it deleted itself...
- I also scanned with "Xoftspy" - it found several entries and all were fixed.


After This i thought my pc was clean atlast, until i ran publisher and my screen resolution went bezerk. (The Trojan Was Disguised at MS Office 2003 - but i opened the legit version so i don't get what went wrong)

i am Now Re-running housecall, Running a panda scan and have downloaded "spyware doctor", so far 27 infections found by the latter one.

I will upload the logfiles of the scans once they're done.

Btw, should i upload a dxDiag? Or is that just for technical issues regarding games ect?

Attached Files

hijackthis.log (10.5 KB, 5 views)

k, Spyware Doctor has finished its scan.... not looking good

-Trojan.Downloader.Druser
-VX2 Look2Me(several of these)
-EliteBar(several of these)

The Trojan was located in

HKCU\Software\Windows NT\Current Version\Windows##run

The other two were In the teporary internet folder, probably created by the trojan? I empty my temp files regularly so this sounds likely.
Will Update on panda and housecall scans when they are finished.

Hi and welcome to PCHF.

We'll see what the PC Security Team have to say about your log - hold tight, one of them will be online soon.

K. Should I resort to registering for spyware doctor or could this sort of thing be fixed manually?

I am sure that we will be able to remove this manually for you.

Panda Log: See attachment

Attached Files

Activescan.txt (5.8 KB, 6 views)