But there is a few files I cannot get rid of. They are named "gxqyitde.exe" - one in the root c:, one in a program folder called "xrymxqtq" and one in the Start folder on the start menu. It as a mediaplayer like icon.
I can delete these files manually by booting of UBCD4Windows but they keep coming back. I think th reason why it's so hard is because of the registration entry: HKLM\software\microsoft\windowsnt\currentversion\winlogon\userinit.exe, c:\programs files\xrymxqtq\gxqyitde.exe.
I can delete it within windows but it keeps coming back. I can't remove it through Autoruns or Hijackthis. And I cannot boot into SafeMode.
I have tried to edit the registry through the utilities on the UBCD but no luck. Tried a CD called PCRegedit a bootable iso that in theory gives you the ability to edit the registry, but the mouse and keyboard always goes dead just after booting.
Any suggestions except for a complete format and reinstall. Also I fixed the master boot record just in case it was one of those infections but still no dice.
Edited by hamluis, 11 November 2011 - 12:52 PM.
Moved from XP to Am I Infected.