Took a few hours to run but this worked! The file is gone. Thanks so much for your help!

Yeah, I think the reason chkdsk isn't working on reboot is because when the computer reboots it does not recognize the external hard drive until it is unplugged and plugged back in (though I'm not...

The file is about 300 MB. Just tried everything with the same results on a different computer.



No luck.

I'm puzzled.

The only option I found in HijackThis was "delete on reboot" which did not work because the external HD is not immediately recognized on reboot.

Unfortunately this did not work either. I received a message saying that the file was corrupted or unreadable and that I should run chkdsk.

This produced the same results as chkdsk /f

Today I was copying a file from my laptop onto my USB external hard drive when the transfer froze and I had to cancel it. The file is still intact on my laptop but the unfinished copy created on my...

Ok, great. That's what I will do then. Thank you for all of your help!

I have barely even touched my computer in the past 4 days but problems are STILL lurking.

Today my computer inexplicably shutdown and would not restart. I was receiving a blue screen with an error...

Ok, great. I uninstalled Combofix & HijackThis and set a new restore point. Hopefully it will be smooth sailing from here on out. Anything else that I should do?

Yes, I made sure I rebooted after running MBA-M (because I don't think I was before). Everything seems like it is running much smoother, the system32 folder is no longer popping up and the search...

oops, double post. didn't think the first one showed up.

Malwarebytes' Anti-Malware 1.32
Database version: 1628
Windows 5.1.2600 Service Pack 3

1/7/2009 1:51:19 PM
mbam-log-2009-01-07 (13-51-19).txt

Scan type: Full Scan (C:\|)
Objects scanned:...

Just a note, I did disable my Antivirus but it appears it was set to be re-enabled at restart which is why it is displaying as enabled on the log.

ComboFix 09-01-07.01 - Matt 2009-01-07 12:40:53.7...

ComboFix 09-01-06.02 - Matt 2009-01-07 11:26:45.5 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1918.1441 [GMT -5:00]
Running from: c:\documents and...

I am not seeing that under Non-Plug and Play Drivers. I'm showing:

AEGIS Protocol (IEEE 802.1x) v3.4.7.0
AFD
ArcNet NDIS Protocol Driver
ASCTRM
Beep
catchme
dmboot
dmload

Still some problems lurking. I noticed Google search engine results redirecting today but MBA-M came up clean. Bizarre. Here are MBA-M and HJT logs I just ran. Any help would be BEYOND amazing as I...

Did anyone happen to have a chance to look at this?

Ah, ok. I had already run SDFix before I read this. In order I ran MBA-M, SDFix, ESET, MBA-M and HJT. ESET came up clean and the lastest second MBA-M and came up clean as well. Here are the newest...

Thanks! That got MBA-M running. I ran HJT and deleted what you said then ran MBA-M and cleaned up what it found.

Going to run SDFix, ComboFix and ESET Scanner again as a precaution.

You're probably sick of me at this point but another problem came up out of nowhere today. Noticed some general slowdown (and later search engine redirecting) and tried to run MBA-M but it will not...

I scanned with MBA-M today and it came up clean. The problem appears to be gone for good. Thanks again for your help! Hopefully it will be a LONG while before I will have to ask for it again.

I'll...

Ok, great. I did both of those things.

I will wait a few days and scan with MBA-M to see if anything rears its ugly head and I will post back.

New HJT scan:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:53:11 PM, on 12/14/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot...

Ah, ok. The actual BitTorrent program is not running but "BitTorrent DNA" is apparently something that came bundled with the install that according to a Google search has given more than a few people...

I do have the BitTorrent program on my computer but there are not any files shared through it and it has not been running or in use recently (or at all since the problems began), strange.

Here is...

Yes, I saved the MBA-M file to my desktop, rebooted and then ran HJT.

Here is the new HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:21:24 PM, on 12/13/2008
Platform:...

Thanks again for all of your help! Here is the new log:

ComboFix 08-12-13.03 - Matt 2008-12-13 20:25:25.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1918.1359 [GMT...

No, I am not.

I thought all was well and was going to post saying so this evening but I unfortunately ran into some problems while restarting my computer earlier today so I ran MBA-M again and it found problems....

Yes, things appear to be solved. I'm going to give it a day or so and run MBA-M again just to be sure but it appears to be cleaned up right now. Thank you!

MBA-M log:

Malwarebytes' Anti-Malware 1.31
Database version: 1490
Windows 5.1.2600 Service Pack 3

12/11/2008 6:33:56 PM
mbam-log-2008-12-11 (18-33-56).txt

Scan type: Full Scan (C:\|)

Oops, my fault! Sorry!

Here is the full log:

ComboFix 08-12-11.01 - Matt 2008-12-11 16:18:30.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1435 [GMT -5:00]
Running...

Thanks! Here is the log:

ComboFix 08-12-11.01 - Matt 2008-12-11 16:18:30.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1435 [GMT -5:00]
Running from: c:\documents and...

Did anyone have a chance to look at this? Any help at all would be AMAZING and I'd really appreciate it.

Thanks! Here are the logs:

SDFix:

SDFix: Version 1.240
Run by Matt on Mon 12/08/2008 at 04:24 PM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix

For the past few days I have been having a virus problem that doesn't seem to want to go away. I first noticed the problem when Internet Explorer was running slowly and I was seeing unexplained pop...

No, the problems appear to be gone. Thanks again for your help! Hopefully it will be a LONG while before I need it again. :)

ESET log:

# version=4
# OnlineScanner.ocx=1.0.0.635
# OnlineScannerDLLA.dll=1, 0, 0, 79
# OnlineScannerDLLW.dll=1, 0, 0, 78
# OnlineScannerUninstaller.exe=1, 0, 0, 49
#...

I guess Sundays and my computer don't get along.

The MBA-M log is below. It says in order to delete C:\WINDOWS\system32\wscmp.dll it must be restarted so I will do that and then run the ESET...