Question : Trojan horse Proxy.26.AX

Good morning.

I am running Windows XP with SP 2.  I have AVG free installed, and updated.  It keeps finding either Trojan Horse Proxy.26.AX or Trojan Horse Proxy.MOU, in a file called either setup.exe or something nonsensical like 44exgmreg18.exe.  These are in my Local Settings - Temp folder.  I've run my computer in Safe Mode and then run the virus scan and it doesn't find anything.  I emptied the Temp folder, also in Safe Mode, and when I went back into normal mode the virus warning popped up again.

How do I get rid of this virus?

Thank you

Answer : Trojan horse Proxy.26.AX

You should certainly run HJT again and have it fix this entry:

 O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

Then reboot and run HJT again and make sure the entry is no longer there.

Later, you should be able to delete the files in your Temp folder.