• Close all open Explorer windows and browsers
• Run HijackThis
• Click on the Scan button and when complete
• Put a check beside all of the items listed below
• Click on the "Fix Checked" button
• When complete and all files removed, close the application.

O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

Delete the file in bold if found.

C:\WINDOWS\system\smss.exe <- Make sure the file is in folder is C:\WINDOWS\system\ and not C:\WINDOWS\system32\
the file in that folder is good.

Restart the computer to reset the registry.

Cleaning your temp files will make the Ewido report that much smaller.

Download ATF Cleaner by Atribune from here http://www.atribune.org/content/view/25/1/ and save it to your Desktop.
Read the instructions about the cookies. Delete what you do not need.
Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
*Prefetch (Windows XP) only.
Java Cache

The rest are optional - if you want to remove the lot, check "Select All".
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

If you use the Firefox or Opera browsers, you can use this program as a quick way to tidy those up as well.

When you have finished, click on the Exit button in the Main menu.

For Technical Support, double-click the e-mail address located at the bottom of each menu.

* The purpose of Prefetch folder is to increase the speed at which you can access the programs that you use on your PC. Unfortunately, Windows doesn't differentiate between a program you use every day and one you use every blue moon, which means that it may be prefetching a lot of stuff that you rarely use, adding to your startup time.
You may find that the first time you boot up after cleaning out this folder, your PC takes longer to get into gear - the second, and subsequent, boots should be quicker.

NOTE: this is a 30-day trial of the program. This means that after 30 days the "background guard" protection will de-activate. However, this version can continue to be updated and used as an on-demand scanner forever.

Download, install, and update the trial version of Ewido anti-spyware

1. Load Ewido and then click the Update tab at the top. Under Manual Update click Start update.
2. After the update finishes (the status bar at the bottom will display "Update successful")
3. Close Ewido. Do not run it yet.

Please reboot your computer into Safe Mode. To boot into Safe Mode, please restart your computer. Tap F8 before Windows loads. Select Safe Mode on the screen that appears.

• In Safe Mode, load Ewido and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.
• Ewido will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. Ewido will display "All actions have been applied" on the right hand side.
• Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).
• Restart back into Normal Mode.

מקור:
http://forums.spywareinfo.com/index.php?showtopic=84239

בברכה,

Speed