Under the categories heading, both have "Registry Data"
Under the "items" heading, both have: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\winlogon\userinit.
Under "Other", one has Data: c:\windows\system32\userinit.exe, the other has Data: system32\userinit.exe
Any idea how I can remove these? She also continues to have popups, one is talking about bestvirusremoval2009 and the other is a pop up "yes/no" button saying her computer is infected and would I like to fix it (I've been clicking the X to get out of those, they're not coming up in processes). I thought that might be something similar to antivirus 2009 or antispyware 2009 but nothing except the two trojan agents comes up when I run MalwareBytes (and nothing at all comes up when I run AVG).
Any ideas would be greatly appreciated.
EDIT: The exact wording on the pop up "Ok/Cancel" button is "You have a security problem! Do you want to scan your computer for viruses?"
Edited by KyleLitke, 28 February 2009 - 04:35 PM.