Hi sheehan Please boot in to safemode start hijackthis Select this O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\System32\kgxamwo.exe Click fix it Delete C:\WINDOWS\System32\kgxamwo.ex ...

Hi You must remember to copy the version from service pack 2. So you need to extract Service pack 2 and copy userinit.exe to a media.

Hi their, the reason I asked to ballfrog to restore his/her system in sted of cleaning it up was. All registry done by the worm/virus will be set back the same goes for all file change. If you clea ...

Sorry you must have misunderstond me, because I did't told you to delete the file userinit.exe just to upload it for analyse. Do you know what filesystem you used on your xp NTFS or FAT32? 1. If ...

Hi Download cclean see the link in my signatur install cclean Boot in to safemode Disable systemrestore (See my signatur for howto) Disable hide systemfiles and folders Start hijackthis S ...