DreamsAndGasoline

By the way, I uninstalled AVG Thanks so much again for all your time and help Oh, should I uninstall Windows Defender too? Logfile of HijackThis v1.99.1 Scan saved at 10:25:07 PM, on 11/14/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C

Uh Oh ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Wednesday, November 14, 2007 10:22:03 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 15/11/2007 Kaspersky Anti-Virus database records: 459675 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My

And the new HijackThis Log: Logfile of HijackThis v1.99.1 Scan saved at 8:52:23 PM, on 11/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WIND

HI! thanks for helping! I greatly appriciate it, and so do my parents. Here is the ComboFix report: ComboFix 07-11-08.1 - User 2007-11-12 19:47:12.1 - NTFSx86 Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\User\Desktop\internet.lnk . ((((((((((((((((((((((((( Files Created from 2007-10-13 to 2007-11-13 ))))))))))))))))))))))))))))))) . 2007-11-12 19:45 51,200 --a------ C:\WINDOWS\NirCmd.exe . ((((((((((

This is log from my parents computer. It is extremely slow. They don't have hardly anything stored on their computer. Some family snapshots and a few word documents. They get a fairly good amount of objects in Symantec Antivirus Quarantine. Here are a few: * http://securityresponse.symantec.com/secur...-101518-4323-99 * http://securityresponse.symantec.com/avcen...o.cgi?vid=19040 * http://securityresponse.symantec.com/secur...-062217-0726-99 * A few are just under the file name "00000004.zip", "00000001.zip", ext. Says "Still contains one infected items" HijackThis Log: Logfile of H

Oh Great! Thanks! I have another question. You said only one anti virus. Do I disable the one that came on my computer? Trend Micro Pro-cillin 12? I also have Ad-Aware SE, cwshredder (Trend Micro Inc.), AVG, Windows Defender, and Spybot and Destroy. Wow, didn't know I had that much, lol. What do I need to keep.. if anything. I'll download what you recommend. Thanks! Meg

Oh and another thing... Should I just keep my computer as it is, or shut it down hard and see what happens. or wait untill you do your thing? I really appriciate all you are doing!

Scanning Report Saturday, October 27, 2007 22:50:12 - 00:05:52 Computer name: MEG Scanning type: Scan system for viruses, rootkits, spyware Target: C:\ D:\ -------------------------------------------------------------------------------- Result: 19 malware found Tracking Cookie (spyware) System System System System System System System System System System System System System System System System System System System -------------------------------------------------------------------------------- Statistics Scanned: Files: 34313 System: 7987 Not scanned: 5 Actions: Di

Opps! Sorry! And Thanks for helping! Logfile of HijackThis v1.99.1 Scan saved at 7:54:08 PM, on 10/27/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\WL

I thought you're not supposed to shut down that way. Should I try? And Terrorist.. I didn't see anything there that would help me.. Did I look over something? I found the shortcut to restart. I'm going to try that now. Thanks Guys! I also posted my hijackthis log in the malwear removal forum, Do you think that when someone looks at that, it will show the problem?

Yes

I have Windows XP Media Center. A few days ago, I tried to restart by clicking the button on the bottom of the start menu. Instead of the pretty colorful box with the pretty buttons (haha): that gray ugly old school box popped up with the drop down menu. The screen faded out like it always does, but when I chose the restart one the box disappears and the screen brightens right back up. Nothing happened, not one thing. I tried to shut down, and log off. They did the same thing. Anyone have any ideas?! *Please talk Computer English to me Oh, another thing.. Is there anyway to shut down with

I have Windows XP Media Center. A few days ago, I tried to restart by clicking the button on the bottom of the start menu. Instead of the pretty colorful box with the pretty buttons (haha): that gray ugly old school box popped up with the drop down menu. The screen faded out like it always does, but when I chose the restart one the box disappears and the screen brightens right back up. Nothing happened, not one thing. I tried to shut down, and log off. They did the same thing. *Please talk Computer English to me : ) Please Helpppppppp, Tha