Ried

Hi,

Download KillBox http://www.greyknight17.com/spy/KillBox.exe.

Reboot into Safe Mode (tapping F8 or F5)

Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. For each of the following files below, check the box that says 'Unregister .dll Before Deleting' if it's not grayed out. Copy and paste each of the following into KillBox (hitting the X button for each file - choose NO when it asks if you want to reboot):

C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\WINDOWS\system32\dsobd.exe

Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

AutoUpdate

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [p34P3qW] dssetmgr.exe
O4 - HKCU\..\Run: [Y0vFRka6S] dsobd.exe

Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Program Files\AutoUpdate
C:\WINDOWS\system32\dsobd.exe
dssetmgr.exe Do a search for this file and delete it

Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.

Reboot into Normal Mode run a new HijackThis scan. Save the log file and run KRC HijackThis Analyzer http://www.greyknight17.com/spy/KRC%...20Analyzer.zip in the same folder to get the result.txt log. Just post the contents of the result.txt file in your next reply.