I'm having alot of trouble in my small office with a Trojan. It places the following in C: xscs.exe xsscs.exe ezstub.exe mfffxs.exe overpro-347 buddy.exe webrebate.exe And install these programs. ie host maxspeed memory watcher MiDaDdle virtual bouncer SEP Win-tools websearch toolbar webrebates IE-Optimizer ISTbar I cannot get rid of this trojan. I delete all of the files from C: I uninstall all of them. I run Hijackthis and remove them. I also remove them from startup. I also run Adaware 6, Spybot, and Giant anti-spyware. They keep coming back! Can anyone help me please? Thanks

Have you turned system restore off and restarted your computer, entered the safe mode and ran all your scans while in it? If that failed go to http://www.spywareinfo.com/articles/hijacked/ Follow their instructions and if you need to use "hijackthis" post the "hijackthis" log at their forum. I think that you will get a much faster response that way to resolve your problem. Be sure that you and everyone that uses your system reads the prevention steps.

I am having the same trouble. I have been asked to create a txt file to replace my c:\csxs.exe file placed after every reboot. In addition I changed the attributes to read only and hidden. It has been 3 reboots with no instance. I also performed Moosoft.com The cleaner, Shredder v1.5l, NAV, Spy Bot and Hijack this.

I found it to be the peper trojan. Look for the removal instructions online. You have to edit the registry.