A further note, many new malware have polymorphic and persistent attributes, and therefore will either make multiple copies of its self or will recopy itself when deleted. Due to the fact the file is named with a number, make sure you search for other files of the same name, i.e. dreamy_setup[4].exe. Also, if the file will not be deleted with messages such as you do not have sufficient privileges or in use, you may have to boot up in safe mode to delete it. If it is particularly devious and will still recopy itself, I recommend using a boot cd or linux live cd to access the hard drive and removing it from there. In addition, there may be several DLL's appended to it that may also need to be removed. I recommend using Process Explorer to check, outlined in this web page that describes how to remove a particular malware that is injected within explorer.exe, but can be applied generically to any unwanted DLL's within explorer.exe.

sometime the files of this sort do not like being deleted and would return with an error that its being used by another programs, if you hit that then just delete them in safe mode which will get rid of these unwanted files.

Raj

Hello coolraj. What you say is true, but if it attaches itself to an essential windows program that will boot with windows in safe mode, it may become necessary to remove the file through another source that does not directly use the operating system in question.

Yep agreed fully with you mate, Always better to learn different ways to approach the root of problem. Hope your solution suggestion works and sorts his problem out. DO appreciate your input.

Raj

By gosh I think that has got it. I have been able to remove all that was troublesome and everything launches correctly. I found another post on the web that spoke to the system tray not having all of the apps listed and the fix is so easy.

after system startup and before login, just let the harddrive finish its processing about a minute or so, waite for the hard drive to pause and then login. Everything will appear in the system tray as it is supose to.

so how long does your boot take now? everything doing a bit better?
i suggest that if you use a router you close all the ports on it excluding 80 and 88 that way you reduce your trojan intake, cuz it seems you had quite an infestation

everything is running quick and smoooooth. I have a router and will shut down all bt 80 and 88. thanks again