I posted this message before incorrectly in the Windows XP forum, and someone reffered me here. Basically, there is this .exe called dodi.exe that keeps running, then it runs another instance of it...and in the task manager it just says "." so when i look at my task manager, under the programs menu, it says: . . . . . and all those are part of the worm... i tried scanning with everything, and nothing picked it up..I tried to quarentine the actual file via norton, and it worked, then i deleted it from quarentine, and everything seemed fine, until i looked back about 15 minutes later and another wave of the ".'s" came back. I read on google that it also spawns other worms and such on your computer...and i find this true because a whole line of files i never seen before spawn on my C:\ Directory... I tried to delete the running processes but they say i have no access...I try running the internet, but the worm closes it off... is there anyway i can get rid of this darn thing?! Freestyle artist

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download WinPFind from this link to your desktop http://www.bleepingcomputer.com/files/winpfind.php we will use this to find hidden files that could be giving you grief. Locate the WinPFind.zip file, right-click and extract it to your C:\ folder. This will create a folder called WinPFind in the C:\ folder. Next, please reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. Navigate to the C:\WinPFind directory and click the file called WinPFind.exe .to open it. Once it is open, click on the Start Scan button and wait for it to finish. This program will scan large amounts of files on your computer for known patterns so please be patient while it works as it can take a while, upwards to 30 minutes or more. When it is done, it will show the results of the scan. Click on the Copy to Clipboard button Paste the contents of the log in your clipboard as a reply in your next post. Please download ATF-Cleaner to your desktop from this link http://www.atribune.org/content/view/19/2/ We will need it later in safe mode Download and install Ewido Security Suite We will need this later in safe mode Be sure to update Ewido Download killbox to your desktop from this link Killbox We will need it later in safe mode

Format C: and reinstall windows. when everything works correctly, MAKE A BACKUP! Why waste time trying to fix the unfixable when you can restore a working copy of XP in 60-seconds? 50-Calibre

Did you try what I suggested in the earlier thread? ===================================== If at first you don't succeed, you're about average. M2

to jabuck... I will try everything you suggested but it will take time since I have dial up and also since I have to download everything on this [my dell] computer and transfer it to my gateway because the infection is limiting my internet service. to 50-calibre... The thing is...its not windows XP... to Mechanix... I have to read the earlier thread give me a sec... Freestyle artist