Thanks for posting the logs.
Can please run either DrWebCureIt or Gmer, as an MBR rootkit might also be present.

DrWebCureIt:
http://www.freedrweb.com/cureit

Gmer:...

I asked for the SDFix log, where is it?

Please fix the following entries in hijackthis while all other windows are closed click "Fix Checked'.
O2 - BHO: (no name) -...

C:\WINDOWS\system32\cssrss.exe
C:\WINDOWS\system32\ctfmona.exe
O4 - HKLM\..\Run: [WMDM PMSP Service] C:\WINDOWS\system32\cssrss.exe
O4 - HKLM\..\Run: [ctfmona] C:\WINDOWS\system32\ctfmona.exe
...

We should check if there are still some nasties hiding there, as there are many nasties that hides from the hijackthis scan.
You can run one of those online virus scanners, either BitDefender,...

Hi,

I didn't realize I've listed twice msxeg.exe, but that's okay it now says 'file missing'

C:/WINDOWS/fiosectc.exe
C:/WINDOWS/diopis.exe
The above 2 files might no longer be present as...

Hi,

Please run Hijackthis and put a check next to these entries, close all other windows except Hijackthis and click "Fix Checked" button.
O1 - Hosts: 124.238.254.113 www.10280011.com
O1 -...

Hi,
Your hijackthis log is showing wareout infection!
Fixwareout should take care of it.
Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe...

Great! smitfraud infection is gone.

I noticed in the option 1 log that smitfraudfix detected a rustock.b rootkit driver, it could very well be a false positive as this has happened before, but...

Hi,

Your Hijackthis log is showing wareout infection!

Uninstall UnSpyPC or KillAndClean from Add/Remove Programs if listed:
You must have an active Internet connection when running this fix,...

Hi,
You have smitfraud infection showing in your logfile.
STEP 1:
Please download SmitfraudFix (http://siri.urz.free.fr/Fix/SmitfraudFix.zip) (by S!Ri)
Extract the content (a folder named...

Okay Smitfraud file is found in the scan and also detected rustock.

1. You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not...

Hi,

1. Open HiJackThis
Click on the "Config..." button on the bottom right
Click on the tab "Misc Tools"
Click on "Delete File on Reboot"
Navigate to this file -->...

Still some entries looks missing.
Now it shows that you're running in diagnostic startup mode, you need to make sure that all startup entries are checkmarked when scanning with hijackthis otherwise...

I didn't get notified that you replied, somethings' wrong somewhere.

I'm surprise that these entries are still here especially the 020 when Avenger supposedly removed it, please fix them:
R0 -...

Yeah, your hijackthis log looks clean! but the symptom you mentioned sounds very much like a smitfraud infection but not showing in your log.
Try renaming hijackthis.exe, some entries might show up...

I'm so sorry to not replied promptly.
what it says in the Avenger txt was it couldn't find those files that's why it couldn't delete them. Maybe those were just registry entries leftovers.
...

Good job you also run the VirtumondoBeGone because vundofix was seeing the vundo dll file --> ssqro.dll
but it didn't delete it, all it deleted were the reversed files of the vundo dll(those with...

1. Please download The Avenger by Swandog46 to your Desktop.
http://swandog46.geekstogo.com/avenger.zip

*Click on Avenger.zip to open the file
*Extract avenger.exe to your desktop
...

How about the Fixwareout report.txt and the new hijackthis log?

I need to see your hijackthis log.

Smitfraud infection has been removed.
Smitfraudfix detected a rootkit driver, can you run this tool Gmer to check for rootkits.

Download GMER from here:...

Hi,
You have smitfraud infection there!

Step 1:
Please download SmitfraudFix (http://siri.urz.free.fr/Fix/SmitfraudFix.zip) (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your...

Hi,
What you have is smitfraud and wareout infections.
Follow the instructions in order please.


1. Please download SmitfraudFix (http://siri.urz.free.fr/Fix/SmitfraudFix.zip) (by S!Ri)...

Sorry but I really dont know the term hijackthis log, were can I find it? doing a virus scan?

Sorry, a hijackthis log is the result of the Hijackthis scan.
Hijackthis.exe is a little tool that...

Here's the link to Hijackthis,exe. the default install path is your Program Files.

Please download HijackThis 1.99.1
http://www.cyberanswers.org/forum/uploads/HijackThis1991.exe
Open...

Hi,
1. Please download VundoFix.exe (http://www.atribune.org/ccount/click.php?id=4) to your desktop
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning,...

Hi,

Your Hijackthis log is showing the contemptible Trojan Torpig, which can allow an attacker to gain control of the system, log keystrokes, steal passwords, access personal data, send...

Hi,
You have smitfraud infection there!

You may want to print out or make a copy of these instructions before starting, because you will not be able to connect to the internet during most of...

Hi,

Please download SmitfraudFix:
http://siri.geekstogo.com/SmitfraudFix.php
Extract the content (a folder named SmitfraudFix) to your Desktop.

Next, please reboot your computer in Safe...

Hi,
First we need to know what malware/viruses is in your system. We need to look at your Hijackthis log.
Do not fix any entries in Hijackthis, just post the entire log here.


"isamonitor" is...

Did you run any scanners before you scan with Hijackthis?
You have vundo entries in your log and also a dialer but it seems to have their "file missing" already and you still have popups?

...

"btw, should I worry about the trojan dialer and my passwords?? has it been intercepting everything?? should I change passords for my bank acc etc online??"

Your Hijackthis log looks clean!
Bear...

Hi Andrew,

Can you please rename Hijackthis.exe because I suspect that you may have the Vundo infection that can hide some entries in your log.
Navigate to the directory where you saved...

Hi,
You have a trojan dialer there.
Please Open HiJackThis
Click on the "Config..." button on the bottom right
Click on the tab "Misc Tools"
Click on "Delete File on Reboot"
Navigate to this...