Download the Panda Antirootkit programme (http://www.majorgeeks.com/downloadget.php?id=5457&file=9&evp=48f78333afefe88250d4d2dd09f65b17).

Unzip it and run the PAVARK.exe file.

Tick the box...

Please read the rules.

One idea that may be worth a shot. Open up your "My Computer" and do a search for mbam.exe. Once located, right click on it and select rename. Rename it to helpme.exe then try running it.

If no .exe will run then I can't see a way of cleaning it.

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the...

No problem at all! I am glad to be of service. :)

It's an infection I recon. You need to get Mbam. Can you perhaps dl it on a friends PC and stick it on a cd or thumbdrive?

In that case, download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the...

It's looking like the machine may need to be formatted and reinstalled from scratch. The malware is obviously fighting back.

Ok, it may be worth running combofix on the machine as combofix is often updated. You can get it HERE (http://www.combofix.org/). Post it's resulting log.

Absolutely not, because if it is faulty hardware then the new install will have the same problem.

C:\QooBox\Quarantine\C\Program Files\GetModule is a directory created by combofix. It is a quarantined directory. When did you run combofix? And can you post it's log?

See if you can uninstall...

Also, event viewer may help to shed some tight on the problem. INSTRUCTIONS (http://www.bleepingcomputer.com/forums/topic40108.html)

Turn on "show hidden files and folders". INSTRUCTIONS (http://www.bleepingcomputer.com/tutorials/tutorial62.html)

Locate and delete the following. Only delete the things that are in bold.
...

Your computer is quite badly infected. Yet another example of how useless Norton is.

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.
...

Using pirated software is illegal.

Plus there doesn't seem to be many good reviews on QuickHeal either. I wouldn't trust it.

In my opinion, Vista is not a very good OS. I have stuck with XP and a dual boot of Windows 7 release candidate.

If your pc has been designed for XP then it wont run all that great with Vista...

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the...

See what the event viewer says. INSTRUCTIONS (http://www.bleepingcomputer.com/forums/topic40108.html)

Ewwwwww, that means you have very poor protection.

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe...

No problem at all. If you keep Mbam up to date and use it regularly you should have few if any further malware problems. :)

I'm with sparkax, what's the actual problem?

Well said Crunchie!

stvrich, have you never heard of the edit button?


No offense meant to emmasyah, but we have to treat every poster as a noob as we cannot possibly know their level of...

We need to know exactly what protective software you have in order to asses the likelihood of your pc being infected.

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the...

Your HJT log looks clean.

I recon you can now mark this thread as solved if you are happy with how your PC is running. :)

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the...

2 entries to fix via the same method as before.

R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) -...

I agree and will be offering no further help in this thread.

If the OP wants to act like a baby who has lost his rattle then I want no part of it.

There is no need for language like that at all.

I was only trying to offer you advice to keep your pc clean.

If you don't like the advice, tough!

If you had asked for advice before wasting...

Your friend needs to disinfect his PC and so do you. What protective software do you have (please list all of it) and what does it say when you do a full scan?

"run like a dog with three legs!" On a bed of nails! ;)

They have undoubtedly been paid to say it's good.

Absolutely everyone that has experience with malware removal will tell you that Norton is a complete waste of time and money. You may as well hang...

I don't know what you mean by "go all the way and get Norton"?
Norton is absolute rubbish. If you have paid for it, you have wasted your money.

Have HJT fix the following entry by placing a tick...

Your Mbam log is clean. I need to see a fresh HJT log as I asked for before.

There is nothing bad in your HJT log either.

See if there is anything showing up in event viewer. INSTRUCTIONS (http://www.bleepingcomputer.com/forums/topic40108.html)

Have HJT fix the following by placing a tick in the box next to each entry.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =...

I also need to see the HiJackThis log I asked for.

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the...