Krazypal

Oh... btw - I did the Kaspersky online scan as well yezzzterday night - took some hours. But it did find those two entries: C:\Program\http\fp2006-final-3.00-setup.exe/file1626 Infected: not-virus:BadJoke.JS.RJump skipped C:\Program\http\fp2006-final-3.00-setup.exe Inno: infected - 1 skipped Just delete in safe mode?

Thanx for your reply birdsong. Yes it's a swedish version of the OS - plz let me know if you need som help with the translations Here's the gigantic textfile(s) from the BSS-scan: Deckard's System Scanner v20070826.66 Run by Ägaren on 2007-08-31 07:43:49 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled; attempting to re-enable...success. -- Last 1 Restore Point(s) -- 1: 2007-08-31 05:43:54 UTC - RP1 - Systemkontrollpunkt Back

Well... I'm trying to fix my moms comp here. Since she didn't have any firewall or antivirus program - it was a mess here. I've cleaned up a couple of hundred spyware, rojans and stuff but I have one prob... the BHO entries won't be deleted. I've tried in safe mode and some programs like xptools, adaware and asquared without success. Help! Here's the logfile: Logfile of HijackThis v1.99.1 Scan saved at 19:55:11, on 2007-08-30 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.ex