Hi mate The bugs will only affect 1 user account so you
need to scan on all accounts.I know spybot removes this
so would start there but run all the scans in safe mode
and disable system restore
ALWAYS do these when trying to remove a bug.
First: Turn off Windows XP System Restore (Start,Right
click my computer,Properties,then system restore and
disable and apply)
Next: Enable viewing of hidden files and folders and
extensions; Some programs can hide this way by not being
visible in Windows. Start Windows Explorer and click on
your main hard drive, usually c:\. Then select Tools from
the top of Windows Explorer and then Folder Options. Go
to the View tab. Scroll down to the folder icon that says
Hidden files and folders and check show hidden files and
folders. Also, right below it, uncheck the hide file
extensions for known types
Next to boot into Safe Mode(Get all the downloads before
booting into safe mode,You can leave spyware blaster &
spyware guard as they are protection products and not
removal programs but maybe use them when your system is
clean if you want)
Reboot the system and tap F8, choose Safe Mode.
Next: Delete Temp Internet files :
Open a internet browser window, click Tools then Internet
Options.
Click on the Delete Cookies and the Delete Files buttons,
then click OK and close the browser window.
Next: Delete Windows Temporary Files - (start,run then
type %temp% delete all files you can in this folder
The Windows temporary directory (usually located at
C:\windows\temp).
This directory should not be confused with the Internet
Explorer "Temporary Internet Files Directory".
The Windows temporary directory stores temporary files
that are used during installation of programs and at
other various times.
Cleaning this directory regularly is generally a good
idea.
Ad-Aware SE.......Install, click Check for Updates now
and get any updates, then scan.
http://www.majorgeeks.com/downloadget.php?
id=506&file=11&evp=8dbaff7daca8f4b55bf695220993fc0f
Spybot S&D........Install, do the search for updates now
and get any updates, then scan also use the immunize
button to prevent more attacks.
http://www.majorgeeks.com/downloadget.php?
id=2471&file=11&evp=2470f9bfb0cc682334ff8c4459556118
CWShredder......Download the run and uncheck the box that
says move cws files to recycle bin the press fix!
http://cwshredder.net/bin/CWShredder.exe
Also if you get rid of this try using these other free
products to prevent any more attacks in the future again
they will need to be installed for each user to work
correctly
SpywareBlaster...Install, click Download Latest
Protection Updates, Check for Updates, and then Enable
All Protection,It does a great job of blocking known
vulnerabilities as well as known malicious websites.
http://majorgeeks.com/downloadget.php?
id=2859&file=11&evp=61b0e8ad41924a03c37615f4682b4cef
And Spyware Guard
http://www.javacoolsoftware.net/downloads/spywareguardsetu
p.exe
Theres plenty of other programs you can use but try these
first and just repost if it doesnt delete it for you then
i can provide some more,it could be a solution to delete
the user account but if its on your system its best
trying to find it and destroy it rather than leave it
hidden
Good Luck Andy