gimbel

Seems to be good now. I reinstalled Norton and that works, so i think I am good. Thanks!

Here is the Kapersky scan results: ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT 2008-02-26 08:01 Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 26/02/2008 Kaspersky Anti-Virus database records: 581221 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target

Here is the log: WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons I'll try reloading Norton. Marc

Here is the Combofix log: ComboFix 08-02-22.3 - mgimbel 2008-02-22 14:29:23.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1570 [GMT -8:00] Running from: C:\Documents and Settings\mgimbel.ESD\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\mgimbel.ESD\Desktop\CFScript.txt * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! FILE :: C:\WINDOWS\system32\fewjyeoz.dat C:\WINDOWS\system32\hrmzpphj.dat C:\WINDOWS\system32\lejpoila.dat . ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))

Here is the Combofixlog: ComboFix 08-02-22.3 - mgimbel 2008-02-22 10:34:23.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1545 [GMT -8:00] Running from: C:\Documents and Settings\mgimbel.ESD\Desktop\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat C:\Documents and Settings\All Users\Application Data\Mi

Here is the Malwarebytes' log: Malwarebytes' Anti-Malware 1.05 Database version: 391 Scan type: Quick Scan Objects scanned: 28708 Time elapsed: 5 minute(s), 27 second(s) Memory Processes Infected: 0 Memory Modules Infected: 3 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 5 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\WINDOWS\system32\AppCert\prx99b.dll (Trojan.Downloader) -> Unloaded module successfully. C:\WINDOWS\system32\AppCert\wnl32.dll (Trojan.Downloader) -> Unloaded

I have found that I have a virus. Norton Anti Virus cannot run and Spybot shuts down the computer midway through the scan. I ran Spybot in safe mode and it found a few things but all minor. I got counterspy and adaware but neither found anything. I found some parts of the virus. In particular, I had a ~.exe file in the system32 directory which was a pain to remove. There also seems to be a dll called d3d8a.dll which has a few things running at startup. i cannot stop them from running and I cannot delete this file. I suspect its the problem but do not know. Here is my hijackthis log: Logfile of