Hi, I have something I cannot seem to get rid of. It is in hklm\software\microsoft\windows nt\currentversion\winlogon kdjen.exe. The only program I can find that finds it is trojan remover, but it cannot remove it. I have symantec antivirus, ca-antispyware, spybot search & destroy, superantispyware, lavasoft ad aware, as well as malwareebytes anti-malware and NONE of these other programs seem to find it. It originally came from a site I clicked onto, something about home viewer. I cannot remember now, and cannot remove it. I start in safe mode, system restore off, it is found by trojan remover, and removed. Upon restart, trojan remover does a fast scan, only to have it right back. I check with regedit, and sure enough it's there. All I have been able to do is re-name it. I cannot get it gone. I can remove it in normal windows mode with T Rem, but upon restart it is back again too. Please help? I cannot seem to find anything useful about it on the net.

Please post a Malwarebytes and Hijack This log, new logs please not the older ones you have run in the padt.

Too late I'm afraid. The virus\spyware changed from kdjen.exe to lsass.exe under the same reg. listing stated above. I ran a reg cure to try to fix it, but instead it wiped out the registry keys dealing with logon. So, my pc is stuck without fully booting. Luckily I have a full drive backup I made back in july or august, and I can still access the drive to pull out newer data since the backup. So, I am in the process of rebuilding the drive now. Should have it done tomorrow. I checked the backup drives registry earlier, and the entry I had troubles out of was blank as it should be. So, I will be good to go. Thanks for reading and trying to help.

Thanks for the follow-up.