Reader_S.exe removal

Running ComboFix followed by SuperAntiSpyware or MalwareBytes will give you good results.

Thanks for the responces,
                               I have tried all those. During the SuperAntiSpyware scan, I get a blue screen error Page_Fault_in_nonpaged_area. Then had to Reboot. MalwareBytes installed and ran fine. It picked up several items, however it will not update. HiJackthis will run, but not remove selected items. When I download ComboFix I rename it, try to run it, but get an error and the Icon dissapears. Same thing happens in Safe Mode. There is no anti virus installed.....I'm at a loss.                                           Don

You have rename ComboFix before downloading and not after downloading. When you click on the link and it says 'Save as' that is when you should rename it. You can try that and see if it works or not.

Also there are a lot of web pages that will not open ....virus removal tutorials for example

This is a NASTY little bastard!

I am going to suggest that you download an antivirus such as AVG (http://free.avg.com/) or Avast (http://www.avast.com/eng/download-avast-home.html) and save them with a different name. Then try to install them on this computer, see if you are able to install them or not. If you are unable to do so, then you need to access internet using another computer and download them in a USB stick and copy them to your computer then.

In case those antiviruses don't install straightaway, then you can use this method:

Download Dr Web Cure It Live CD from: http://www.freedrweb.com/livecd/ . Burn the ISO (which is only around 70 MB) on a CD as an image and then boot your PC from it. Let the scanner run and after the scan is finished, click on 'select all' and 'cure'. Then restart your PC and install the antivirus that you couldn't install earlier and scan with that.

I'll give it a go in the morning

If the above methods did not do the trick , try the below link 

http://www.symantec.com/connect/forums/readersexe-variant-here-what-i-did-resolve-it

Ok peeps.......After 2 days of scanning and deleteing, it looks like the 'Reader_s' is gone.....for now. The machine seems to be running OK. However I can't get the Device Manager to work. When I try to open the Device Manager from System Properties>Hardware Tab>Device Manager I get this window....."Windows cannot find 'mmc.exe'. Make sure you typed the name correctly, and then try again. To seach for a file, click the Start Button, and then click Search." Any clues?
                                                                             Thank You Thank You Thank You
                                                                                                                                         Don

Go here  http://www.microsoft.com/downloads/details.aspx?FamilyId=61FC1C66-06F2-463C-82A2-CF20902FFAE0&displaylang=en
Try installing the new Microsoft Management Console MMC

That should overwrite older mmc. Your virus probably infected the mmc.exe and it got deleted.

Let me know.

Hey NaturaTek,
                          Thanks for the link. I downloaded and installed....still didn't work. I think it could be a deeper problem because I went to the Control Panel> Administartive Tools> Computer Management and got this: "This file does not have a program associated with it for performing this action. Create an association in the folder options control panel" ....Then the "Open With" window opens with choices like Internet Explorer, Word Pad, Paint, Picture Viewer...
                                                                                          Thanks,   Don

Download http://www.dougknox.com/xp/fileassoc/xp_mscfix.zip

And double click the reg file inside, merge it

Rats.....still not working correctly
                                                            Don

SWEET NIBLETS! I got it back!
Heres what I did. I went to my other machine, copied the mmc.exe file to a flash drive. Then I copied it directly into the System32 folder.. rebooted, went to device manager and got this :"The procedure entry point ?pickicondlg@@YGHPAUHWND_@@PAGIPAGIPAH@z could not be located in the dynamic link library mmcbase.dll"....So then I ran the MMC install I downloaded from the link you sent. Then it worked!
I'm not exactly sure what happened but its going now......Thank You Again,    Don

Thanks for the advice Vee Mod

Hello Vee  Mod
                Help me out here.....So, the solutions I accepted were wrong? I used some of the advice provided. The Kaspersky Boot CD was a great tool. It took a while to run, but I was able to remove infections. Also....If I could not get other virus removal programs to install normally, I tried to install/run them in "Safe Mode". Was this a wrong move? I really don't remember if I had good results with virus removal while running in Safe Mode. Should I accept another solution?
                                                                                                                         Thanks,  Don

You removed my comment again with no reason. It's ok, I'm getting a ruling directly from Malwarebytes themselves.

NaturaTek or shall I say NJTech?

So now that one of MBAM developers along with other developers have told you that MBAM is designed to work better in normal mode not safe mode maybe now you'll believe us ... that we're not just making up all this "should be run in normal mode" stuff.

if you didnt read correctly , there is 1. no harm in safe mode and 2. no problem as long as the user follows up a scan in normal mode. I posted by exact suggestions that I will use, no comment so far.

NaturaTek -
You are the one who needs to learn how to 'read correctly'.
They told you at least half a dozen times in that forum to run MBAM in Normal Mode.
The only suggestion you received after all your comments about 'Safe Mode' that 'it wouldn't do any harm' to use Safe Mode.

It doesn't do any good - and the program is NOT designed to run in 'Safe Mode' - and the program IS designed to run in Normal Mode - and Safe Mode is not as effective as Normal Mode - but you are right in a very minimal restrictive way: there is "no problem" running it in Safe Mode.