Canoeingkidd

Sorry for the slight delay...I was gone yesterday. You appear to be clean of malware now. Since this seems to be a windows problem instead of a malware problem at this point I am going to post a few ideas of my own, my usual prevention speech, and then move this to the Windows Support forum. I have notice that you are running two active antiviruses (Norton and McAfee). While it is not a bad idea to have two anti-viruses installed - only one should be running in the background to protect you at a time. Having more than one running in the background at a time can cause conflicts. Please disable

I am looking for a solution to your problem. I don't think it is malware related... One item returned. Run HijackThis, do a scan, and place a check next to the following items to be fixed: O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe Close all browsers and windows except HijackThis and click "Fix checked". Delete the folder in bold (if present): C:\Program Files\Media Access\ Reboot your computer and post a new HijackThis log in a reply to this topic.

Do you not have administrative access at all or are you just not able to logon to the default "Administrator" account? Most of this will not work if you are logged onto a "limited" XP account... Also, are you on a network? You seem to have a worm that spreads using network shares. http://www.sophos.com/virusinfo/analyses/w32rbotvj.html http://www.sophos.com/virusinfo/analyses/w32rbotiy.html Run HijackThis, do a scan, and place a check next to the following items to be fixed: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Loc

Hello superman, Please go to "Start" > "Control Panel" > "Add or Remove Programs" and remove the following (if present): POP! PeopleOnPage Then run this online virus scan: TrendMicro Housecall scan:Vist the TrendMicro Housecall website. Select your country from the drop-down list and click "Go". Choose "Yes" at the ActiveX Security Warning prompt. Please wait while the Housecall engine is updated. Select the drives to be scanned by placing a check in their respective boxes. Check the "Auto Clean" box. Click "SCAN" in order to begin scanning your system. Please be patient while Houseca

Hello n3rrd, I'm assuming you have already uninstalled Msg Plus? If you have not uninstall it from Add/Remove Programs now. This item O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto suggests you have disabled items in MSConfig. If you have, please re-enable them now so I can see other problems if they exsist. Run HijackThis, do a scan, and place a check next to the following items to be fixed: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.udohlgkqckx.com//_O01Lp2R/1pCAI...weK73wb5hd.html R0 - HKCU\Software\Microsoft\Internet E

This log looks better than your last one. Did you run Ad-aware or something? Run HijackThis, do a scan, and place a check next to the following items to be fixed: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.seekerbar.com/ie.aspx?tb_id=50154 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: eCATRegistrar Class - {02336F51-24CA-4422-AB63-18841ADF35E6} - C:\Program Files\QuikCAT Technologies\Miliki Dialup Accelerator\1.52.0922\eCATBHO.dll (file missing) O3 - Toolbar: Miliki Dialup Accelerator - {4BC3AC04-3E56-411D-B465-4FEA0665

You are using an out-of-date version of HijackThis. The new version shows more information that could aid me in helping you. Please delete the copy you currently have (but not the backups folder, if there is one) and download the latest version from http://www.downloads.subratam.org/hijackthis.zip. Unzip it to a permanent folder such as C:\HJT. Scan with the new version of HijackThis, save a new log, and post the new log in a reply to this topic.

Is it possible he means Spy Detector? Its on the list of Rogue/Suspect antispyware products here - http://www.spywarewarrior.com/rogue_anti-spyware.htm