Help with Krepper Troj./Searchportal/info/1039

Hello everyone! I am posting this thread with the hope that anyone who is in the know about this certain strain of CWS variant will see it and be able to help me with my problem. Here goes: A few days ago, my ladyfriend decided to connect the cable modem back to the net. The problem was that everything had been turned off in order to defrag, (antivirus, firewall, spyware protection). So when I noticed this, I immediately unplugged and rebooted to enable the protection that I normally have running from day to day. Obviously, I found the computer infected with a whole host of nasties. An AV scan sorted a couple of viruses out, a spybot scan got a load of spyware and an AdawareSE scan caught another load of spyware including this CWS variant. I then installed cwshredder to try and catch the rest of it. It catches one instance and removes it, but no sooner has any of my protection caught it it comes back. All the while I am informed by AD-Watch that a registry key is trying to be created: C\WINDOWS\inetdata\winlogon.exe and SYWAREGUARD informs me that my home page is being changed to: http://searchportal.info/10039/ . Also when I do a scan with Xoftspy, it informs me that a trojan is present called Troj/Krepper-G. My efforts are wasted on this as, alas I admit defeat. Any help on this subject would be greatly appreciated as I only have a few hairs left in my head. Thank you in advance!

 

Please follow all the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal


If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.