mark1615

I use Vista but this might also appy to XP so I don’t know if this is a help to you but I had an extremely persistant spyware trojan that hijacked my browser sending me to several commercial websites an especially to a fake virus removal website. I tried 3 AV programs and 3 anti spyware programs and nothing showed up in any of them. I could see from checking out my registry that it had an autorun of the file sobhjozwcg.exe from my c:\user\mark\appdata\local (mark is my logon name). I tried deleting this entry but it always came back. I couldn’t fint the sobhjozwcg.exe anywhere on my computr. After trying several dozen things I booted the computer with a BartPE disk which I mad a while ago with my old XP system (you could try a live Linux which most independent computer stores will sell you for about $5.00 if you can’t get ahold of a PE disk). Lo and behold when I looked in c:\user\mark\appdata\local I found the sobhjozwcg.exe plus a couple more sobhjozwcg files. I deleted them and the problem is gone. Don’t look for sobhjozwcg on your computer as it’s probably a randomly generated name just look for any exe files in your appdata\local directory and delete them as there shouldn’t be any exe files there. Hope this helps.