ziggyff

Ok first time user here.
I've got some kind of rootkey virus/trojan that blocks all anti-virus program loading and scans (as well as loading various microsoft programs, intellimouse, msworks, etc.). It also prevents safemode entry attempts. This virus somehow got past my installed Outpost AV.

Multiple online virus scans tried: panda, trend housecall, bitdefender, and kapersky and 3 days later still stuck as these scans either froze or did not discover any malware other than adware ??

As some online articles suggested, I ran safebootkeyrepair and it got me into safe mode once but at that time all the virus software I tried performing either gave an "invalid win32 appl." error or stated "unable to install in safe mode" msg. Before leaving the one time I was in safe mode, I performed regedit32 and removed all mdelk, srosa, wintems hldrrr keys as suggested by online webhelp forums.(there were about 6 keys ).
Unfortunately most seem to have all reappeared at the next re-boot.

Subsequently as well, every new safe mode attempt just brings me back to a reboot and safebootkeyrepair.exe gives the following error message in the log.txt :

SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.
plus at end
Error: Key: system\currentcontrolset\control\safeboot\minimal does not exist!
this is one cagey trojan.

any help appreciated: the online virus scans that supposedly avoid the virus blocking either freeze up at around 3-5 minutes or discover nothing (curious becuz the bad programs keep appearing in a search). Complicating matters, by not being able to go into safe mode. this keeps me from running anti virus specific .exe 's from avg, pavark etc. which are suggested to be run in safe mode. I also tried microsoft's malicious software tool which also froze?? (sigh)

I've removed all AV software and only have Spybot sd installed currently which was not on your suggested removal list??

Meanwhile, I'm trying all the online scans again starting with panda (each take about 7-8 hours so I'll have plenty of free time awaiting your advice (smile))

addendum; I forgot to mention that this virus/trojan constantly tries to install something called "microsoft photo info" which i have to cancell a few dozen times anytime i try to use windows explorer or other software