Trojan-backdoor-cyn

[DOUBLE TROUBLE]

THIS VIRUS HAS CAUSED A PHYSICAL DUMP OF MY LAPTOP MEMORY.
I CAN ONLY GET BACK ON BY ACCESSING SAFE MODE.
IN SAFE MODE IT ALLOWS ME TO RUN SPY SWEEPER VER 5.5.748 USING DEFINITIONS 1020.
IT FOUND THE FOLLOWING:
TROJAN-BACKDOOR-CYN
TWO FILES
HKLM\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\W INLOGON\NOTIFY\PARTNERSHIPREG\lldllname
HKLM\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\W INLOGON\NOTIFY\PARTNERSHIPREG
TROJAN-DOWNLOADER.GEN
C:\WINDOWSSYSTEM32\kernelw.sys
i tried deleting the last file and rebooting again; however it just dumped again.
the laptop is a toshiba satellite A75-S209
OPERATING PROG XP

[AnnMarie]

Hi DOUBLE TROUBLE, please download SDFix from here and save it to your desktop.

In Safe Mode, doubleclick on SDFix.exe and allow it to extract to it's own folder. Open the extracted folder and double click RunThis.bat to start the script.

Type Y to begin the script. It will remove any Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot. When you hit any key, your computer will reboot. Your system will take a lot longer than normal to restart as the fixtool will be running and removing files.

When your desktop loads, the utility will complete the removal and display Finished. Press any key again to end the script and load your desktop icons. Finally open the SDFix folder on your desktop and copy and paste the contents of Report.txt back in this thread.

Also go here and download Hijack This to your Desktop. When you have downloaded it, doubleclick to install. Once installed, open Hijack This and click on scan. Most of the files listed will be harmless and/or required so do not make any changes, just click on Save Log, copy it and post it back in this thread.

Next go here and download Silent Runners.vbs (clicking the the download link works if you use IE. If you use FireFox, rightclick on the link and choose "Save Link As") to a new folder on your drive and run it. It generates a log too. It takes a minute or two and it will notify you with a popup when your log is ready (it will be in the new folder you created). Please post the information back in this thread. If your antivirus program queries the script, allow it to run.