Vundo trojan problem solved OK.Thank you.

[eirmos]

SDFix: Version 1.88
Run by Nicos on 07/02/2007 at 11:56
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix
Safe Mode:
Checking Services:
Name:
ldrsvc
runtime
ImagePath:
%SystemRoot%\System32\svchost.exe -k netsvcs
\??\C:\WINDOWS\System32\drivers\runtime.sys
ldrsvc - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Below files will be copied to Backups folder then removed:
C:\Documents and Settings\Nikos\Favorites\Error Cleaner.url - Deleted
C:\Documents and Settings\Nikos\Favorites\Privacy Protector.url - Deleted
C:\Documents and Settings\Nikos\Favorites\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\privacy_danger\index.htm - Deleted
C:\WINDOWS\privacy_danger\images\capt.gif - Deleted
C:\WINDOWS\privacy_danger\images\danger.jpg - Deleted
C:\WINDOWS\privacy_danger\images\down.gif - Deleted
C:\WINDOWS\privacy_danger\images\spacer.gif - Deleted
C:\DOCUME~1\Nikos\LOCALS~1\Temp\hd-log.txt - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\ddesupport.dll - Deleted
C:\WINDOWS\main_uninstaller.exe - Deleted
C:\WINDOWS\msdde.dll - Deleted
C:\WINDOWS\msole.dll - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted
C:\WINDOWS\system32\3_exception.nls - Deleted
C:\WINDOWS\system32\drivers\asc3550u.sys - Deleted
Folder C:\WINDOWS\privacy_danger - Removed
Removing Temp Files...
ADS Check:
Checking C:\WINDOWS
C:\WINDOWS
No streams found.

Checking C:\WINDOWS\system32
C:\WINDOWS\system32
No streams found.

Checking C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.

Checking C:\WINDOWS\system32\ntoskrnl.exe
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------





Remaining Files:
---------------

Backups Folder: - C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix\backups\backups.zip

Listing Files with Hidden Attributes:

C:\xvxja6hw.sys
C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0004.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0005.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0831.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL1223.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3131.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3317.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3687.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3768.tmp
C:\Documents and Settings\Nikos\Desktop\recent\EAP\ƒ„Ž10\2006-2007\ANDRIANA\~WRL2974.TMP
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Desktop folders\Draft offers\~WRL2272.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL0003.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL1700.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL1267.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL3649.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2757.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2759.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL3838.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3043.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3317.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL1186.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL2770.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\~WRL0018.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\€Ž•„‘\~WRL0003.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\„¥¦¬© ¦›¦«γ©œ \~WRL0001.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\~WRL0563.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3112.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3505.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL0893.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL1499.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL2943.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0459.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0492.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0526.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0744.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0817.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1379.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1856.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2057.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2233.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3741.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3746.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3959.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3194.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3621.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\~WRL0350.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL1803.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL2256.tmp
C:\Documents and Settings\Nikos\My Documents\My eBooks\CREM\Crem\„¤«¦Άβ_Άž¨ΰ£γ\„¤«¦Άβ_Άž¨ΰ£γ_PACLINE\~WRL0002.tmp
C:\Program Files\Messenger\SET116F.tmp
Finished