ok, so my friends computer is basically F.U.B.A.R.. the other day a AIM contact sent him a link to
http:// profile.myspace.com/index.cfm?fuseaction=user.viewprofile&friendid=85663423&MyToken=27035xxx

I removed vairables to prevent infection just for reference.
he then proceeded to click the link and not pay attention to the dl and he installed the program. Realizing what he did he ran some scans, ad-aware, s&d mcaffee etc. Then he went to work came home, and he was logged off. Then he went to login and couldn't because when he clicks his name and enters password it will load windows, load up and then shut down not getting past the login screen. Ive tried everything i know including safe mode. He can't reformat b/c he has family pics and such that cannot be replaced. I was wondering if anyone had any suggestions as to could be done to fix this. Thanks a bunch. Also i believe the virus is W32.depress b/c a friend of mine got the same one but he can login. Would a xp cd repair help. Im really at a loss here and i dont want my friend to lose his fam pics. Thanksa bunch guys.

" Ive tried everything i know including safe mode." So, what have you tried? Restoring to an earlier date? Virus scan? Another profile? Windows Repair? A little more detail would be good.

Life is more painless for those who are brainless.

sorry about that...it was late...anyways, ive narrowed it down to the software file in system 32. Something seems to be overwriting the software file and replacing the windowsnt/logon reg key.Once i made a backup of the software and replaced the reg key it worked fine.Kaspersky in safe mode, found 4 or 5 trojans and rebooted.Same thing.Im thinking im gonna run a hjt scan and post it for some extra help. im really at a loss as to what i should do here.