Now it's even more confusing:

Both the Administrator and my personal user accounts come up on the Welcome screen! When I log on to Administrator (which requires a password), all my stuff's there....

I've tried to find another post with this problem, and can't find one, so here's what I'm dealing with.

When I go to c: documents and settings, I have a number of users listed - all the ones you'd...

I have a mess on my hands, and I hope someone can help me!!

Machine: ThinkPad T43p; Windows XP Pro SP2 ( but I can't find my OEM software anywhere. :$ ; we do have a CD from XP Pro SP2 for my...

Isn't there anyone who can give me a clue what's going on here? I'm desperate!

I'm having a couple of problems and am not sure what to do.

Problem 1:

Upon bootup, I get an error message saying that RegCure can't run. When reporting this to Microsoft, I checked the...

Upon startup, I get an error message saying that CCApp can't start because it can't find atl71.dll. I hit cancel and things seem to be working o.k. Do I need this file? If so, how do I get it...

Surprise - the blue desktop is back! I have no idea how, why or what did it, but I'm cautiously optimistic.

Is there anything else that's worth checking before we declare this solved?

I haven't been able to figure out the hosts file you're speaking of -- every time I run a cleaning run, I get the long log.

Any other suggestions?

Here's are a couple of SMF files:

SmitFraudFix v2.244

Scan done at 8:46:25.52, Fri 11/02/2007
Run from C:\Program Files\Security Stuff\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP...

I'm back.

The RO entry came back once I restarted in safe mode. I've deleted it now in regular mode. Here's the HJT log after deleting the entry.

Logfile of HijackThis v1.99.1
Scan saved at...

O.K. Thanks - was mostly curious, not upset!

Here are two HJT logs - the first from safe mode after running SmitfraudFix and HJT and following your instructions, and the second from regular mode without making any changes.

Safe Mode:
...

At the bottom of the posting window, there's a row of icons, but no explanation for what they mean. Can you help this newbie, as an earlier post on Viruses, etc. hasn't been answered and I want to...

My husband would really like to get his laptop back! He's ready to reformat and I don't want to go there if I don't have to.

Can someone please check out my original note and give me some ideas...

I know it's infected - I've run more programs than I care to count - SpySweeper, SpyBot, Norton Anti-Virus, XSoftSpy, AdAware, AVG, .... and am still having problems. I'm so glad to have discovered...

I've contracted a couple of Trojans - one was Zlob.MediaCodec, which I think is gone now, but am not sure; the other is Smitfraud, which I see by other threads is active right now.

Symptoms: ...