What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow COmputer, please help.

19 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Dave, I will try the Winsock program when I get home tonight! On to the AVG log report. I didn't get a chance to post another HJT log after rebooting because I got a "System is closing……" message again after I ran the ATF cleaner file. But here are two logs (Sorry if they are completely redundant!!): - - - @HL_TestStarted @TestName_02 - @HL_ReportFind C:\WINDOWS\SYSTEM32\NCTIMUTE.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\WINDOWS\SYSTEM32\rttxujel.ran @EID_Id_trj Generic.SDO - @HL_ReportFind C:\WINDOWS\SYSTEM32\NMPDWYGA.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP24\A0037168.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP35\A0043078.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP74\A0057207.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167802.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167805.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167806.0XE @EID_Id_trj Proxy.25.AJ - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167807.0XE @EID_Id_trj Downloader.Generic3.HHL - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167808.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167817.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167818.0XE @EID_Id_trj Proxy.25.AJ - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167819.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167820.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0168811.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0169811.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0170815.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP256\A0170820.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0170841.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0171842.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0172842.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173842.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173846.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0174846.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP259\A0175850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP260\A0176850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0177846.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0178850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0179850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180852.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0181846.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0182850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0183850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0184850.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0184979.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185968.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185970.0LL @EID_Id_vir I-Worm/Generic.AJK - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198162.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198163.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198164.0XE @EID_Id_trj Proxy.25.AJ - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198165.0XE @EID_Id_trj Downloader.Generic2.YVR - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198166.0XE @EID_Id_trj Downloader.Generic2.YTN - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198167.0XE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198168.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198169.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198170.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198171.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198172.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198173.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198174.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198175.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198176.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198177.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198178.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198179.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198180.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198181.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198182.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198183.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198184.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198185.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198186.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198187.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198188.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198189.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198190.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198191.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198192.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198193.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198194.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198195.0XE @EID_Id_trj Downloader.Generic2.YLT - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP318\A0201205.EXE @EID_Fi_vir Downloader.Tibs - @HL_ReportFind C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP318\A0201206.EXE @EID_Fi_vir Downloader.Tibs - @HL_TestEnded @TestName_02 75 - @HL_ActionTaken C:\WINDOWS\SYSTEM32\NCTIMUTE.0XE @HL_ActVVInserted - @HL_ActionTaken C:\WINDOWS\SYSTEM32\rttxujel.ran @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\SYSTEM32\NMPDWYGA.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP24\A0037168.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP35\A0043078.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP74\A0057207.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167802.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167805.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167806.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167807.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167808.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167817.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167818.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167819.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167820.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0168811.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0169811.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0170815.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP256\A0170820.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0170841.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0171842.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0172842.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173842.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173846.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0174846.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP259\A0175850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP260\A0176850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0177846.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0178850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0179850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180852.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0181846.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0182850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0183850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0184850.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0184979.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185968.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185970.0LL @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198162.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198163.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198164.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198165.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198166.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198167.0XE @HL_ActVVInserted - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198168.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198169.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198170.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198171.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198172.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198173.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198174.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198175.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198176.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198177.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198178.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198179.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198180.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198181.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198182.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198183.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198184.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198185.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198186.0XE @HL_ActCleaned - @HL_ActionTaken C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310�
Post #17
SORRY FOR THAT LAST POST!! I didn't realize how much was in that report!! Here is a better format: General properties Report name Complete Test Start time 2/20/2007 22:10 End time 2/20/2007 11:06:42 PM (total: 56:03.4 Min) Launch method Scanning launched manually Scanning result Threats found Report status Scanning completed successfully Object summary Scanned 58448 Threats Found 75 Cleaned 0 Moved to vault 17 Deleted 58 Errors 0 C:\WINDOWS\system32\shell32.dll Change Changed C:\WINDOWS\SYSTEM32\NCTIMUTE.0XE Moved to Vault C:\WINDOWS\SYSTEM32\rttxujel.ran Deleted C:\WINDOWS\SYSTEM32\NMPDWYGA.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP24\A0037168.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP35\A0043078.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP74\A0057207.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167802.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167805.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167806.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167807.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167808.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167817.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167818.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167819.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0167820.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP250\A0168811.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0169811.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP255\A0170815.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP256\A0170820.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0170841.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0171842.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP257\A0172842.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173842.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0173846.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP258\A0174846.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP259\A0175850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP260\A0176850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0177846.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0178850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP262\A0179850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP264\A0180852.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0181846.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP265\A0182850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0183850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP266\A0184850.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0184979.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185968.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP269\A0185970.0LL Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198162.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198163.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198164.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198165.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198166.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198167.0XE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198168.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198169.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198170.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198171.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198172.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198173.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198174.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198175.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198176.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198177.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198178.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198179.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198180.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198181.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198182.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198183.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198184.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198185.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198186.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198187.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198188.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198189.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198190.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198191.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198192.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198193.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198194.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP310\A0198195.0XE Deleted C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP318\A0201205.EXE Moved to Vault C:\System Volume Information\_restore{2CD7AAF3-5C36-4462-923E-8220F0F20E45}\RP318\A0201206.EXE Moved to Vault Thanks, Billy
Post #18
Dave:

Good news!! WinSock fixed my connection. ALso, my computer seems to be functioning relatively normally right now. Here is a HJT Log:

Logfile of HijackThis v1.99.0
Scan saved at 9:58:19 PM, on 2/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
C:\Program Files\Support.com\bin\tgcmd.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\SRVLOAD.EXE
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\Bill\LOCALS~1\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe"
O4 - HKCU\..\RunOnce: [CheckNetworkConnection] "C:\Program Files\Support.com\providerComcast\desktopdoctor.exe" /flow /flow=diagnosenetwork /trayclick=true /haveconfirmedwiring=true /haverenewed=true /haverestartedmodem=true /onrestart=true /havehealed=true /issuenumber=5ba64c84-9519-4b27-b244-10ba709dbc7e
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt3_x.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/insta…staller_gmn.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005102…all/xscan53.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
O23 - Service: AVG7 Alert Manager Server - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Panda Antispam Server Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
O23 - Service: Panda Firewall Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
O23 - Service: Panda Function Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
O23 - Service: Panda Pavkre - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
O23 - Service: Panda PavProt - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
O23 - Service: Panda Process Protection Service - Unknown - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
O23 - Service: Panda Preventium+ Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
O23 - Service: Panda IManager Service - Panda Software Internacional - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe



Thanks again for all your help!!

billy
Post #19
Hi Billy,

Great, glad to hear you've got your Internet back. Your log appears to be clean :thumbup:

One major observation here though. It appears you have gone and installed AVG Anti-Virus along with Panda. You never want to run 2 AV's at one time. Please read the following:

This can cause many issues including system slow down, conflicts, ect…
You can keep both installed but just use one for real-time scanning and disable the other. The disabled program can still be used for one-time scans.

In general you never want to run 2 Anti-Virus or Firewall programs at the same time. Other types of Spyware protection such as Spybot, SpywareBlaster, ect… are usually OK (and recommended) to have multiple programs running for layered protection.

Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which may be infected anyway).

Click Start>Help and Support>Undo changes to your computer with System Restore
Select Create A Restore Point then click Next. Give it a name it and then click Create

Click Start>Run and type Cleanmgr
Click the More Options Tab.
Click Clean Up in the System Restore section.

Use ATF Cleaner to remove temp files, cookies, cache, ect…

Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it.

Under Main select the following:
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

It's normal after running ATF cleaner that the PC will be slower to boot the first time.

In addition to your current protection and selecting only one Antivirus I recommend the following:

Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly or set your computer to receive automatic updates. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Install Spybot - Search and Destroy - Spybot: Search And Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
A tutorial on installing & using this product can be found here:
Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

Install Ad-Aware - Ad-Aware SE You should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
A tutorial on installing & using this product can be found here:
Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer

Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
A tutorial on installing & using this product can be found here:
Using SpywareBlaster to protect your computer from Spyware and Malware

Install SpywareGuard - SpywareGuard provides a real-time protection solution against spyware that is a great addition to SpywareBlaster's protection method.
A tutorial on installing & using this product can be found here:
Using SpywareGuard to protect your computer from Spyware and Malware

Update all of your Anti-Malware programs regularly - Make sure you update all the programs I have listed and the ones you are currently running regularly. Without regular updates you Will Not be protected when new malicious programs are released.

Here is a great link to a post here on securing your PC after an attack.
http://forums.tomcoyote.org/index.php?show…mp;#entry257163

Follow this list and your potential for being infected again will reduce dramatically.

Glad I was able to help.
Dave
Post #21
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI