"Pierre-Normand Houle" <houlepn.nospam@attglobal.net> wrote in message
news:kc_3e.13493$g_5.328508@wagner.videotron.net.. .
> I've been trying to eradicate this virus for several days. It was detected
> by Spybot. I have installed Ad-Aware SE Personal and bought a copy
> of Spyhunter for 30$. I've also run the FxIsbar.exe utility provided by
> Symantec.
>
> I start WinXp in safe mode and run all these utilities, scan all my
> drives,
> remove all the pest and all seems clean. I reboot and it just reinstalls
> itself.
> The suspicious processes that keep coming back are qquwa.exe, qquwm.exe,
> xpjrvh.exe and, of course, istsvc.exe, plus a load of registry entries
> referring
> to XXXToolbar and other crap. I kill and clean everything but it keeps
> coming
> back after each reboot. (I've tried most of the manual removal procedures
> for XXXToolbar and Istbar that I've found on the web or usenet)
>
> It there a *free* antivirus out there that would block it from
> reinstalling itself
> at reboot or make a better job of detecting and eradicating it than
> Spybot,
> AdAware and Spyhunter do? I'd be glad to stop spending money trying to
> get rid of that nuisance.
>
> Thanks for any help!
>
>

http://forum.hijackthis.de/showthread.php?t=2792
Read down through the posts. Ruby explains to the poster how to eliminate a
trojan. Although it's not the same as yours the directions may still work.
It worked for me on a different trojan.