The following steps removed it from a Vista computer – hope this will help some people

Open Windows in safe mode using F8 at windows startup.

1) REMOVE FILES:
—————-
Use windows Explorer to delete offending files.
In the examples, [USER NAME] is your particular user name.

DELETE FILE: C:\Users\[USER NAME]\AppData\Local\[RANDOM FOLDER NAME]\[RANDOM CHARACTERS]tssd.exe

NOTE: The file itself will end with “tssd.exe” but will be preceded by random characters. An example
would be “qifqxbxtssd.exe”. The file will be contained in a random folder under “Local” folder. You will
need to locate it.

I also deleted the following 2 files, only because it looks as though they were created
at the same time as the [RANDOM CHARACTERS]tssd.exe file. Not sure if these really needed
to be deleted. If these files are associated with the malware, it’s possibly that they could
also have random names:
C:\Users\[USER NAME]\AppData\Local\Temp\5.405369293529676E7.exe
C:\Users\[USER NAME]\AppData\Local\Temp\mbf2820.tmp

2) FIX WINDOWS REGISTRY:
—————————
Use regedit to modify the windows registry

HKEY_USERS\S-1-5-21-1424416978-2464694987-698909382-1000_Classes\Local

Settings\Software\Microsoft\Windows\Shell\MuiCache:
removed entry for [RANDOM CHARACTERS]tssd.exe

Removed entire key:
HKEY_USERS\S-1-5-21-1424416978-2464694987-698909382-1000\Software\Microsoft\IntelliPoint\AppSpecific\[RANDOM CHARACTERS]tssd.exe

HKEY_USERS\S-1-5-21-1424416978-2464694987-698909382-1000\Software\Microsoft\Windows\CurrentVersion\Run
Removed entry for ybkchxbu (this is probably random), which had the value:
C:\Users\[USER NAME]\AppData\Local\[RANDOM FOLDER NAME]\[RANDOM CHARACTERS]tssd.exe

3) FIX INTERNET EXPLORER
————————
The malware virtually disables internet explorer by pointing it to a bogus proxy server.

To fix, open internet explorer and select Tools\Internet Options\Connections
Click on the LAN Setting button.
At the Local Area Network (LAN) Settings window

Check “Use a proxy server for your LAN…” and then click on the Advanced button. Remove the HTTP entries for
Proxy address to use (127.0.0.1) and Port (5643)
Click OK

Answer yes to the question “Do you want to turn off the proxy connection anyway?”
Back at the Local Area Network (LAN) Settings window uncheck “Use a proxy server for your LAN…”, and check “Automatically detect settings”

C:\windows\system32\rundll32.exe
Application not found

ive tried on lots of icons in control panel and this is what pops up..
i havent read (on any of the many many forums i have looked at to try to fix this thing) that anyone else is having this problem…
im not too computer savay so when u guys say go to registry… how do u get there?? please help and if someone would please email with a detailed way to go into my pc to try to find this thing i would be ever so happy!! its really frustrating this thing and i wish ppl who put things out there into the world would get a f***ing real job and stop screwing with other ppls PCs!! Thank goodness that my daughter has a laptop that i can communicate with the world to try to fix this… ok i have rambled on long enough!! Thanks in advance to anyone would can help me!!
:} jen

o ps…
i have tried even to RUN a program and the only one it will allow me to do is COMMAND… then i dont know what to do from there… HELP ME PLEASE SOMEONE!!!

Remember, Dont be a click happen person like alot of people, read before you click. Good luck!