I have found a rootkit in Xp system and delete core.sys with Gmer, because i found extrange some procedures in Icesword and because i read your coments above. Well... In safe mode, after user gmer, i use avg antyspyware and found another rootkit.agent and it was deleted. Next avg antyspyware free and a extrange thing appears in the beginning of scan "error reading boot sector"! I as found more trojans... wat is the correct procedura now? Scan with a external disco or cdrom?

Thanks.

Just to let you know that we don't do help topics here in tandem. One topic is used for one helpee. Otherwise, it gets way too confusing since rootkits are very complex. Thanks.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008