psyk0tic

here are the results of the Kaspersky scan: ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Saturday, October 28, 2006 6:15:40 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 28/10/2006 Kaspersky Anti-Virus database records: 235957 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan

in C:\WINDOWS\System32\bak are 3 files: hkcmd.exe, igfxpers.exe, and igfxtray.exe i do not see any backup files in this folder Edit: ahhh sorry, thought you meant backups of the files you posted in the quote. i think i got it now...

Here is the log as per requested: Find AWF report by noahdfear ©2006 21504 byte files found ~~~~~~~~~~~~~ 21504 byte files sorted with strings ~~~~~~~~~~~~~~~~~~~~~ 25600 byte files found ~~~~~~~~~~~~~ 25600 C:\DOCUME~1\KATIBY~1\DESKTOP\EDUCAT~1\SOCIAL~1\AFRICA~1.WPS 25600 byte files sorted with strings ~~~~~~~~~~~~~~~~~~~~~ 26450 byte files found ~~~~~~~~~~~~~ 26450 byte files sorted with strings ~~~~~~~~~~~~~~~~~~~~~ bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\APOINT\BAK 11/07/2003 08:21 PM 114,688 Apoint.exe 1 File(s)

yes, safemode is still working, i ran AVG again after restarting again in safemode, and another 6 instances of the trojan came up in the restore files...restarted again, scanned again, and it came up clean, booted into normal mode again, and the desktop came up, but the original problem is still there, and it runs extremely slow...

done, found 96 instances of one virus, and 1 of another, here is the AVG log: --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 10:21:53 PM 10/27/2006 + Scan result: C:\Program Files\Apoint\Apoint.exe -> Downloader.Agent.awf : Cleaned with backup (quarantined). C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0398NAV~.TMP -> Downloader.Agent.awf : Cleaned with backup (quarantined). C:\Program Files\Sony\ISB Utility\ISBMgr.exe -> Downloader.Agent.awf : Clean

here are the results of the panda activescan report: Incident Status Location Virus:Trj/Lowzones.SU Disinfected Operating system

is it alright to be going through all of these processes while in safe mode? as of now it seems to be the only way possible to get anything done, as trying to open any files/programs/websites in regular mode takes quite a long time.

i believe so, nothing was added after all of the problems except for HJT, avg, spybot, and ad-aware. she has no idea when or why the problem started, one of the virus scans picks up a win32: agent - BVS trojan, im not sure if that is the source of the problem, but it was found to contaminate some .exe files, and every time i clean/quarantine one, it shows up in another when i scan again... hope it helps a bit. thanks again.

im trying to help my girlfriend fix her laptop right now, it started out, she couldn't log into SSL secured pages/windows/programs. the login boxes would come up as a page cannot be displayed window or window portion. first checked all browser settings, tried a different browser, and nothing. noticed she was slacking on her windows updates, so i ran spybot and adaware then installed windows updates, but the problem still wasnt fixed. booted into safe mode and all works fine. she needs her laptop for school/work, so she currently has it. i'd greatly appreciate any help with this problem, i have