mogwai

So does that mean the infection has gone?

Things are running fine but any scanner I use still throws up the same infection warnings. C:\123.exe I think is MGTools.exe which I renamed in the hope it might allow it to run. Should I still delete it?

Okay here's the report that I couldn't get earlier. kasrep.html

Thank you very much for the help. I've run kaspersky online scanner and it wouldn't go past 95% (I left it scanning for 7 hours) Unable to get a log because it has frozen. Any suggestions?

Additional info. The infected files seem to be: C:\System Volume Information\Microsoft\services.exe C:\System Volume Information\Microsoft\smss.exe The virus manifests itself in annoying audio adverts, blue screen crashes and volume settings being changed to mute among other things. Stopping the 'iexplorer' process stops it for a few seconds until the process starts up again.

I've followed the instructions provided for removal but following rebooting the virus is always still present. If there is anyone out there that can help with this then please reply. I've provided logs from various scanning programs that may be of use. It may be important to know that that gmer rootkit scan made my computer crash every time. Attach.txt avz_log.txt combofixlog.txt DDS.txt mbam_log_2010_06_29__17_33_54_.txt rootr29_06_10.txt ark.txt SUPERAntiSpyware_Scan_Log___06_29_2010___15_04_50.txt