I have run my adware program in safe mode and regular mode multiple times...and even purchased an additional registry cleaner....but I am unable to delete the following:

It comes out as "abetterinternet.nail" and another item is "windows"

The scan log shows....

Windows Object Recognized!
Type : RegData
Data : explorer.exe, c:\windows\system32\kisvb.exe
TAC Rating : 3
Category : Vulnerability
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows nt\currentversion\winlogon
Value : Shell
Data : explorer.exe, c:\windows\system32\kisvb.exe



Windows Object Recognized!
Type : RegData
Data : explorer.exe, c:\windows\system32\kisvb.exe
TAC Rating :5
Category : Vulnerability
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows nt\currentversion\winlogon
Value : Shell
Data : explorer.exe, c:\windows\system32\kisvb.exe


Please Help

Hi, rosenji. You may want to try the VX2 Cleaner here: http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml . Follow the instructions on that page and post a full system logfile if you are still unable to remove it.

Good luck.

4 minutes difference!

, Corrine got there first, so i have removed my reply

I have the same problem and this did not sort it for me

Hey... this is a case of the SHELL value in Winlogon key being comprimised...

it should only have "explorer.exe" in the Shell value, unless you have explicity placed that value in yourself for some sort of other purpose....

are you comfortable with the registry? if you are, then you could edit that entry removing the ", c:\windows\system32\kisvb.exe", and leaving explorer.exe