Hello, I would appreciate help on fixing this horrid virus that infected my machine yesterday. It started as a fake security warning and then sent my machine into a spin. I ran MBAM and it found about 20 viruses, which it then removed, all except for one that keeps coming back no matter what I do. I have noticed many other threads on this problem, but in the interests of reducing confusion, I am posting it in a new thread. I run Windows XP SP3, AVG free antivirus, Zone Alarm. When I remove the trojan and then watch the task manager, a process appears for a few seconds called hdav.exe. Then it hides itself again, but this I think is part of the trojan. It has disabled access to the task manager, changed registry settings to disallow changes to desktop properties, system restore and a few other things (sorry I am too tired to remember ... been up most of the night trying to fix this). But I seem to have stopped all of those nasties, but am still left with the trojan agent 'taskman'. I cannot see the hdav.exe process in the task manager since updating MBAM again this morning, but it is still behaving strangely and not all my usual icons are appearing in the system tray. It also does a split second flash of the blue screen of death when starting up, and will not allow me to start is safe mode. The results of trying to remove the taskman trojan is: Malwarebytes' Anti-Malware 1.41 Database version: 2955 Windows 5.1.2600 Service Pack 3 14/10/2009 4:37:17 PM mbam-log-2009-10-14 (16-37-17).txt Scan type: Quick Scan Objects scanned: 94659 Time elapsed: 2 minute(s), 37 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ' I really am not that technical-minded, so this situation has left my poor brain cells rather frazzled as the learning 'curve' has been vertical. So please, some assistance 'for dummies' would be really appreciated :-) Thank you in advance.