Originally Posted by Sticks

It was just that yesterday and today, whilst trying to go to a part of the Dilbert site using Firefox, Winfix 2005 shows up and it is panic stations as it refuses to shut down, and gives all sort of dialog boxes.

I have downloaded SpyBot and run it.

It found some cookie entries and some registry entries, which have now been sent to the back up section. I am terrified of doing anything down there.

I then did a reboot, and the QOSMEDIA.EXE and HHSBDAZE.EXE trying to initialise on shutdown. On boot up, when I was waiting for MSN to give up trying to connect and for Zone Alarm start up, my PC crashed / restarted.

I then had to wait to see if my PC would forever keep restarting at this point, or as it has now restarted. I thought that SpyBot had managed to inadvertantly sabbotage my PC.

While writing this QOSMEDEA.EXE has tried to access the internet. A google search reveals nothing on this program, so I do not know if it is legitimate or a nasty. The fact I could not find it on a Windows Explorer search does not bode well.

How can these things survive different types of deep scanning, including three bootscans?

BTW doing the nuke option is not an option due to such things as the broadband, XP service pack 2, Front Page plus all my other files