I had ComboFix so ran a scan-here's the results for this. Do you still want me to restrore today's HiJackThis stuff and post?

ComboFix 09-04-30.02 - George 04/30/2009 16:26.1 - NTFSx86
Microsoft...

here's the Malwarebytes logfile from today:

Malwarebytes' Anti-Malware 1.36
Database version: 2056
Windows 5.1.2600 Service Pack 2

4/30/2009 6:10:42 AM
mbam-log-2009-04-30 (06-10-42).txt
...

where is the backup section? or the MBA-M log? will try to locate.
when I left for work this morning, I left Vipre antivirus running on a full, deep system scan.........thanks
george

Hi,
Computer seems to be going slower. I did a Trojan remover scan and got rid of a few things, and then did Malwarebytes, and removed a few things. HiJack This shows 2 new things that I cannot...

Hi,
Did another scan last night and nothing appeared..thank you, again, very, very much. I really appreciate your time and effort!. Have a great day.
George

Hi,
I ran Malwarebytes full scan this morning and No trojan.agent appeared.
Should i run it in safe mode with files "not hidden"? or anything else...
Thanks
George

Hi,
Did as was instructed, but after double clicking the batch file it gave me a black screen with...paraphrasing:
Could not find c:\windows\system32\stu2.exe
'pauseDel' is not recognized as...

Hi,
I'll answer the first response first.

1. Yes, I do have the SP.3 cab (23,294 Kb) also have SP2.cab(21,724 kb)

2. In System 32 under properties the userinit.exe is 26, 112 bytes

3....

Hi,
I am not sure I went to the right place, but I found the file "Stu2" in C: Win: System32,,,, and this was file version it said: 5.1.2600.5512 (xpsp.080413-2113) Size: 25.5 KB (26,112 bytes)...

Hi,
when combo fix was running a memo came up that I did not have "Windows recovery Console" on my machine-do i want to download..........I said "No".....and the scan continued.
Here is the F-scan...

I hope this is what you needed?


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
AutoRestartShell REG_DWORD 0x1
...

Hi,
This is the hijack-this report, and I do not know how to post Winlogon info you request?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:10:08 AM, on 12/4/2008
Platform: Windows XP...

Hi,
I am posting a result of a Malwarebytes scan. I have done it a few times over the last week or so, and these 2 Trjan.Agent reappear. I clean and remove them with Malwarebytes, but they ap[pear...

I cannot get Nod32 to run in safe mode..., i.e. the screen is too big and I can't get to start scan button......and if I try to get to it through Control Center, the "kernel missing....." message...

after your new scan the results were what????
Kotchmar

I'm sorry I forgot to include HiJack This scan;



Logfile of HijackThis v1.99.1
Scan saved at 11:40:47 AM, on 01/05/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

While on some health site, a bunch of warnings kept poping in, and I had Nod32 and counterspy installed....i thought everything would be o.k.
Anyway, here is the problem.......
My opening page has...

thanks..........I thought I had deleted all quicktime from the registry, but I guess it tried to load again.....
George

Problem has been solved.....reduced font size from the desktop to 96 rather than 120 and thatseemed to work.....I lucked out on it........still don't know why the "kernal" message poped up, though....

I tried again to access it from programs but I got a message that said:
"error communicating with NOD32 kernal service"

The only way I can getit to appear on the screen is from the desktop, but...

Hi,
The last 012 entry seems to be new and strange.........do I "fix it"?
Thanks
George


Logfile of HijackThis v1.99.1
Scan saved at 3:39:20 PM, on 25/04/2005
Platform: Windows XP (WinNT...

Hi,
When I go into safe mode and want to do a virus scan using nod 32, I cannot get the scan button to show up.......it is too low on the screen and my cursor can't click it......is there anything...

Hi,
My Nod 32 free trial run us almost up. Everytime I run it, it shows around 63000 files scanned. But if I do Panda online active scan it says it has scanned 100,000+ files. How is this so? No...

Thanks,
I tried CWShredder before, but the malware still showed up............I did try out of the regedit, and this time I was able to delete it.........but I didn't back it up(I did, but only...

Hi,
I've scanned over and over with spybot and adaware 1.05 and this reg. key entry keeps coming up even after I press remove. I have also tried to delete it from the registry in regedit, and a box...

How do I update IE and XP......is it just through the Microsoft update????
Thanks
G

Cleaned up version.....looks good........thanks...........will report if any problems.
I thought I had already downloaded all critical updates to Service pack 1
This seems to happen ehenever my...

Here is the updated version, I believe.........



Logfile of HijackThis v1.99.1
Scan saved at 8:22:14 PM, on 10/03/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

Went away for 5 days and came back to this......many more things on here than when I left........wife has to stop going to these weight loss, etc sites...LOL.
please help.
Thanks
George




...

Hi,
I uninstalled the Panda, and installed PC-cillin, and it seems to not bog the machine down as much. I took a new HiJackThis, and am concerned about the:

F2 is still there, and

...

Thanks,
will do.

George

hI,
Still cleaning.......here is a hijackthis log from a few moments ago.........does F2 seems strange?, and any others? Thanks
George



Logfile of HijackThis v1.99.0
Scan saved at 11:59:00...

could you explain,please......set policies?., fix it?
what happens if I just scan and check the 06 box and click on "fix it"....I am a little confused. Thanks.
George

Hi,
I disabled Panda auto protection and no problems getting logfile, so if you could have a look and see if it's clean, please:



Logfile of HijackThis v1.99.0
Scan saved at 1:30:50 PM, on...

Hi,
You guys have helped me fix up my sons computer an it is all clean, and ready to put in his aprtment. I have hooked up my old computer and updated things and downloaded the trial version of...

Hi,
Things are running great............wioll see what happens when wife goes to her Yahoo.ca account and some URL's she opens.(Prevention.com., etc, and see if anything pops up.......The Trojan...

Hi,
Thanks for bearing with me. I've done it all, hopefully right....will re boot and report how things go tomorrow or tonight if there is something wrong right away.................thanks, again....

Hi,
I re ran Silent Runner and here's what I got(longer than before):


"Silent Runners.vbs", revision 30
Operating System: Windows XP
Output limited to non-default values, except where...

Hi,
I think I did it right. HiJackThis log:



Logfile of HijackThis v1.99.0
Scan saved at 10:49:57 PM, on 2/4/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

Hi,
Here is the SilentRunner scan log:



"Silent Runners.vbs", revision 30
Operating System: Windows XP
Output limited to non-default values, except where indicated by "{++}"