ibjammin21

Thankyou again for all your help Matt. My computer has been running normally since the last barrage of virsus cleansing counter-attacks. I placed a similar request for help on tomcoyote.com, but it hasn't even been looked at yet. Sincerely, Gilgamesh (ancient mesopotamian warrior/demigod)(in case you wondered about the user name)

Well, I've done all you have said with no hang ups. Here is my HJT log: Logfile of HijackThis v1.99.1 Scan saved at 8:41:33 PM, on 12/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\ZCfgSvc.exe C:\WINDOWS\System32\1XCon

Here is the log file for win32delfkil: A Logfile is saved in c:\windelf.txt If the tool doesn't work, there will be probably a new clsid under Sharedtaskscheduler and / or a new notify key. BHO's which are being deleted: ---------------------------- {B212D577-05B7-4963-911E-4A8588160DFA} {6AC3806F-8B39-4746-9C38-6B01CB7331FF} {0976BE78-EA53-4DD6-91E6-E6175940032B} {405132A4-5DD1-4BA8-A181-95C8D435093A} {FCADDC14-BD46-408A-9842-CDBE1C6D37EB} {7A7E6D97-B492-4884-9ABB-C31281DCC4F2} {16875E09-927B-4494-82BD-158A1CD46BA0} {C7CF1142-0785-4B12-A280-B64681E4D45E} {8D82BB89-B58C-4F21-9C5D-377F65947806}

Thankyou for your help, Matt. I did everything as requested with the exception of one thing. When I tried to delete the C:\WINDOWS\system32\st3.dll file it denied me access because either the disk was full or the file was write protected. I went into the properties and the parent file had given permission to read write and execute the file to a third party address that I had no idea where it came from. I changed the settings to deny permission, but still, I can't delete the file. Here is my most current HJT file. Logfile of HijackThis v1.99.1 Scan saved at 1:05:44 AM, on 12/14/2005 Platfo

Hello, I'm running windows xp w/sp2. I keep gettings a recurring virus pop up called new poly win32. My security can't seem to delete it. I have McAfee and PC Surgeon Spyware Removal and Registry Mechanic. Here is a copy of my HJT log. Thankyou for your time. Logfile of HijackThis v1.99.1 Scan saved at 9:28:13 PM, on 12/12/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx