By the way, after I deleted all the svchost.exe in safe mode, I reboot my comp and svchost come back again in both C:\Windows\System32\webm\Svchost.exe and in the registry. Something is replicating...

I just try everything and it still doesn't work.

I reboot my comp to safe mode and then going thru everywhere to delete all the files contained svchost.exe, with the exception of the "real" one...

So basically you are saying to use Hijackthis to fix this file by check it from the list after I do another scan and then click fix? Then I re-boot my comp in safe mode and go into my hard drive to...

You mean the whole WEBM folder? What about the other files inside that folder?
I don't think I have *stripplayer*, but I will double check. So basically I need to remove O4 - HKLM\..\Run:...

Ok, these are the steps I did:

1. Unzip the HJT to it's own folder and ran the hijathis. I checked the 2 entries you indicated and since you didn't really says to deleted these files, I went...

Ok. Here is the log after I used the scan and it removed 9 more files but I forgot to copy the file names.


Logfile of HijackThis v1.97.7
Scan saved at 2:19:50 PM, on 5/9/2004
Platform:...

Ok. Here is the Log and thanks for your help!!


Logfile of HijackThis v1.97.7
Scan saved at 6:02:34 PM, on 5/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

It still doesn't work. I download "shoot the messenger" and run it but the prompt kept coming up 3 times every 5 minutes or so.

I have also down Purity Scan uninstaller, but that just removed the...

There is a free spyware dector/remover kept prompting me and if I strike the ok key it attempts to take me to the following site: msi2.optima-host.com/spyhunter.html. and install PurityScan on my PC....