Nasty sillytrojan and js/startpage won't leave

[SuaveRick]

Hi there, my father in law had a few viruses and I got rid of most but there still seems to be one left. His start page is the abotu:blank but it's been replaced with a search page and even when I change the start page in IE settings it resets itself everytime.

Also, there is another one (could be the same one) that looks for kernels32.exe when windows starts. I removed it from msconfig, removed a few viruses usins F-Prot DOS and it still looks for kernels32.exe even though it's not in msconfig anymore. I can't view task manager either cause it seems that a virus has dis-abled it... when I hit ctrl-alt-delete it says it's been disabled by the sys admin and I have no idea how to get that back. I'm thinking a format is in order but I'd like to avoid that.... anyone seen this before?

Thanks!!

 

[diogenes10]

There is a hijackthis tutorial here:

http://www.bleepingcomputer.com/forums/tutorial42.html

You can download it here:

http://www.subratam.org/?page=removal

You can run it and look for O5 and O6 lines, If you find some of those showing restrictions you did not set, fixing those particular lines may regain your access to task manager.

faq608-4650 provides a structured beginning to the process of troubleshooting your system.

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?