Original Post
Hello. Recentrly my PC has been doing some crazy stuff, and I think its probably a virus or some spyware. Basically, the executable is located in c:\windows\system32\elitejky32.exe (using WinXP pro), and it writes constantly in the registry some keys, one of them says my country and other stuff, and the second one is a plain write HKEY_LOCAL_MACHINE...\Run so that it starts everytime windows does. I cant find the exe in win32, nor in a console, so I tried erasing it from Linux (it worked), but then it regenerated again (obviously by some other process or something like that). Do anybody here knows whats going on or has had the same problem before??? I looked into symatecs website, and other antivirus looking for new threads but seems like this one isnt documentes. Obviously, I performed a system scan with norton 2005, av antivirus, and ad aware, all of them with up to date definitions but they dont find anything strange. I could monitor the registry activity with sysinternals' regmon, but with process explorer, this exe isnt even shown... One last thing, it constantly opens iexplorer windows with a link to who knows where (its just a picture that seems like a webpage about spyware), and I dont use iexplorer... Any help highly appreciated (more than just saying "reinstall windows") Thanks