Thanks Kenneth,
 From now on, I'll always run my scans in safe mode! Found 5
trojans.In the past, I have had problems with timing my F-key press to
get into safe mode but I just learned I can go to msconfig, Boot.ini
to restart in safe mode.
 Problem solved. Thanks again,

-Phil-

On 1/30/09, Kenneth Whyman <[log in to unmask]> wrote:
> Find and nuke that program. It is concealing itself from your spyware
> scanners while it is loaded, most likely, so use Safe Mode to kill it, just
> to be sure it isn't running. I have had to kill similar infections before.
> This is a bug that uses randomly generated file names as an extra way to
> dodge the scanners, not just in how it can interfere with the scanners while
> it is running.
>
> Kenneth Whyman
> [log in to unmask]
> "Chance favors the prepared mind."
>
> On Thu, Jan 29, 2009 at 11:23 AM, Phillip Williams <[log in to unmask]>wrote:
>
>> Greetings,
>>
>>  My pc (xp home) lately has been stealing my active screen. I can be
>> typing away and look up to see the text had stopped several words
>> earlier (it just happened again). It seems to happen about every four
>> minutes or so. Iv'e run AVG, Spybot S&D and Hijack this. I deleted a
>> couple of questionable BHOs using Hijack but everything else shows
>> clean. I have even watched the processes screen.in msconfig but
>> nothing seems to change when what ever is happening happens.
>>
>>  I downloaded What's Running (as mentioned by another list member) and
>> found another program called Task patrol (cool) and the only activity
>> that coincides with my problem is Internet explorer related. Also a
>> possible problem was a process named "5dI1yxy4.exe". A google search
>> gets no results nor does Task Patrols info base.
>>
>>  I hate to delete it not knowing what it is and I can't delete
>> Internet Explorer (as much as I'd like to) so any suggestions how to
>> procede from here?
>>
>>  -Phil-
>>
>>            Do you want to signoff PCBUILD or just change to
>>                    Digest mode - visit our web site:
>>                   http://freepctech.com/pcbuild.shtml
>>
>
>               The NOSPIN Group is now offering Free PC Tech
>                      support at our newest website:
>                           http://freepctech.com
>

                         PCBUILD's List Owners:
                      Bob Wright<[log in to unmask]>
                        Mark Rode<[log in to unmask]>