Open CCleaner, go to the Tools, Startup. You'll see that there are some unusual, things in the startup listing, what you are looking for is something like c:\documents and settings\applications\temp\ ndeehemdkwkw.exe (some random letters.exe)
Delete this entry and anyothers that look like they are starting up from a Docsand settings or User Temp location.
This will remove the entry.
Download Malwarebytes in safe mode, the restart nomally and run another scan.
Hi. Microsoft security scan / Avg etc wont get rid of it
do the following in safe mode with networking
you may have to run this script sometimes it screws with the exe and wont let you run exe files. it will say not compltly updated or somthing to that effect but will work. make sure you update it. http://filext.com/WinXP_EXE_Fix.reg
Admitdly this is not going to get rid of all of this virus but will get rid of most if it.
also run ccleaner as well.
Hu? did i do that? 16Mb (EDO RAM), K6-II processor, 2Mb of onboard graphics. 32k dial up modem. 12 speed CD ROM. 5¼-inch floppy drive. 500Mb HDD.
one of my friends had this virus, i download a process blocker in safe mode and blocked the process from running. just an idea for others reading this thread. then backup data and clean installed windows. now running Microsoft Security Essentials and all going well