2 trojans keep reappearing after reboot

[hobo]

malwarebytes finds and successfully quarantines and deletes two registry keys (Micorsoft Windows Service) but they reappear after rebooting. I can't run Mcafee (it appears briefly in Task Manager but then disappears) and had trouble getting Malwarebytes to run. I cannot access certain webpages (any microsoft ones or 'technical' ones like Mcafee; Malwarebytes; bleepingcomputer etc) - I get a "cannot display webpage" error and have tried IE; Firefox and Chrome.

I've avoided using the computer since we found the problem so not sure if there are any other issues.

There is a system driver in System Information that matches the registry keys (Micorsoft Windows Service) but I cannot see anyway to permanently disable it or remove it.

This is on an XP machine that had a full re-install earlier this year and I have a fairly recent backup of the data (2 weeks ago) so shouldn't lose too much but hope someone can help to avoid that.

I've attached 2 files from dds so hope they help.

I thought I'd already posted earlier but can't see it so apologies for any duplicates.

Thanks

dds.txtattach.txt

[MrCharlie]

Welcome to the forum.

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

For Windows XP, double-click to start.

For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

[hobo]

Thanks for your reply - turns out when I thought I'd posted my problems on the forums before, I'd actually sent a request to Support - shouldn't have been trying to do late at night! Guess I should wait and see how that goes rather than doing removal attempts for different people at the same time.

Sorry for the confusion.

[MrCharlie]

OK, then I can close this post???? MrC

[hobo]

yes please can you close it.

[MrCharlie]

OK Thanks, MrC

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!