|It happens at 2 minute intervals, it matters not what you are doing, you could leave it sit there and it will pop up the window with the error with almost clockwork precision. :)|
Scan showed there were 8 instances...1 Firewall bypass, 4 Hijackers, 1 Keylogger and a couple of tracking cookies. "SetKey Failes" remains. Since this client needs their box back tonight, it would be easier to re-image it since almost 3 hours have been spent on it simply scanning and cleaning out Temp and old files.
**OK.... Could not let this go the easy way out... This is on an XP Pro SP3 machine..
Event Viewer showed "Blocked by access protection rule..." The path to this particular instance in the Registry is ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Zx_Ag.
Delete Zx_Ag close it. 'SetKey Failes" error window will pop up almost instantly, you need to reboot the machine.
It has been over an hour since I messed with it and thusfar no more error. I have rebooted it three times under different logins, good to go.
While it would have been faster to re-image or reformat for those of you that don't have ghost or such program, I like the challenge for future reference and to help everyone out.
Hope this helps someone in the future.