heydc

There ARE restore points. I've had this system several years and have used a prior restore point many times as I have on several other computers with extremely good results. It is just that the last several times (over several months) I have tried to go back a back to an established restore point, I receive the message that the system has NOT been restored. I always pick a point earlier the time I started having problems. Thanks

The last several times I have tried to perform a system restore in Win XP on an HP desktop, I have not been able to go back to a restore point. Any ideas on where to to start looking for the problem?

Logfile of HijackThis v1.99.1 Scan saved at 8:54:58 PM, on 10/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\

Incident Status Location Adware:adware/look2me Not disinfected c:\windows\system32\msg116.dll Adware:adware/isearch Not disinfected c:\windows\downloaded program files\initial.inf Dialer:dialer.b Not disinfected c:\windows\tmlpcert2005 Adware:adware/ist.istbar Not disinfected c:\program files\common files\Totem Shared Adware:adware/downloadware Not disinfected c:\program files\DownloadWare Engine Adware:adware/cws Not disinfected C:\Documents and Settings\Dave2\Favorites\-Shopping Adware:adware/exact.bargainbuddy Not disinfected

Logfile of HijackThis v1.99.1 Scan saved at 7:32:25 PM, on 10/9/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\S

SmitFraudFix v2.106 Scan done at 17:06:20.39, Mon 10/09/2006 Run from C:\Installation Files\Spy Ware\SmitfraudFix\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{b166be07-30a4-4d38-b781-44528a630706}"="hydrodictyon" [HKEY_CLASSES_ROOT\CLSID\{b166be07-30a4-4d38-b781-4

SmitFraudFix v2.106 Scan done at 23:44:17.42, Sun 10/08/2006 Run from C:\Installation Files\Spy Ware\SmitfraudFix\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system3

Two days ago began seeing a yellow triangle with an exclamation in my system tray. Now receiving many popups advising have spyware - from Winantivirus, pesttrap, malwarewipe as well as adult sites. If I leave the computer logged in , I will have 20 windows when I get back. Starts about 5 minutes after I log on from a reboot. Any help would be appreciated Here is a hijack this log run today: Logfile of HijackThis v1.99.1 Scan saved at 8:39:09 AM, on 10/8/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss

Here is the Kaspersky Scan results 06_28_Kaspersky_Scan.txt

Here are the requested files. I could not run Panda - See error. Ewido_Scan_report_June_23.txt Panda_Scan.doc 05_24_hijackthis_log.txt Ewido_Scan_report_June_23.txt Panda_Scan.doc 05_24_hijackthis_log.txt

Logfile of HijackThis v1.99.1 Scan saved at 9:23:40 PM, on 5/18/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\c

Here are the two scans. thanks for your help!! ================================================================== ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 11:21:53 PM, 3/20/2006 + Report-Checksum: B8A1A4F4 + Scan result: :mozilla.57:C:\Documents and Settings\Aaron.COMPUTER-1-DEN\Application Data\Mozilla\Firefox\Profiles\6e2yg9k8.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.58:C:\Documents and Settings\Aaron.COMPUTER-1-DEN\Application Data\Mozilla\Firefox\Profiles\6e2yg9k8.default\cookies.tx

Logfile of HijackThis v1.99.1 Scan saved at 11:03:39 AM, on 2/26/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\

I am also having a problem where Internet Explorer is loading the website "sweepstakes.com" instead of the desired site. I have run Adware SE Personal and Spybot with no success. I have run HiJack This and the log is shown below. I appreciate any help. Logfile of HijackThis v1.97.7 Scan saved at 12:20:09 PM, on 2/19/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WIND