You need to get rid of the BRAVIAX.EXE trojan. You can google it to find out what it does.

In Windows\system32, look for that file and note its date, time and size. Look for similar files with a...

I keep both FF & IE on my computers to cross-check issues if one or the other fails.

Is there a windows update icon in your task tray (bottom right)? If you haven't done updates for some time, it might be downloading a service pack.

I recommend that you run malwarebytes several times without doing anything else to ensure that the trojan's self replication features are defeated. You can expect still to have problems otherwise.
...

This is the trojan:

winjgf32.dll

What computer port does the modem cable go into?

USB? Ethernet?

If USB there could be a BIOS fix you need to do or a driver update.

have you googled "Windows has stopped working"? There's rather a lot there to help you including fixes.

I think the grey taskbar is not the thing to worry about.

In my experience, the sound problem is usually caused by a conflict - like IRQ. This would cause the dound service to disable. This can...

You're welcome - and well ducked the antiwpa.dll question!

Two computers? The problem's present on both?

Whatever, I've advised you on your choices:

1 Slog it through yourself as per what others have done on this forum. Very tedious.

2 Re-build...

Ah - your son! Cheat codes = Hacks --> Hackers --> Trojans. This is a well known story. Plus, when you're not in the room, what web sites is your savvy sone visiting and removing the trail? From...

You aren't gonna get anything de-bugged here because of the awful losses you've suffered. Nobody wants to take responsibility despite the disclaimers we make.

Beside which your PC is well...

Have a look at this link for a possible solution:
http://en.allexperts.com/q/Computer-Security-Viruses-1737/2008/2/PART-2-MESSAGE-HJT.htm

I haven't the time to fully analyse your HJT log but...

Did you search the forum on the IP address? Usuually the best thing to do first. Anyway, search the forum on the string 82.255 and pick your thread to read.

This is one of the threads that go...

rundll33.exe is the culprit and damage has been done. Its first effects are described in this article: http://www.symantec.com/security_response/writeup.jsp?docid=2003-080713-1333-99&tabid=2

As...

What did you do about antiwpa.dlll?

Also can you throw anly light on this file missing in the HiJackThis log?
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file...

re-build windows seems the right approach to me.

I would have pointed to Antiwpa.dll as a possible culprit. Hackers are tempted to dive into more benign hacking tools such as antiwpa and turn them into trojans. It gives them a clear conscience...

Well done. Perhaps you can mark this thread as solved. The AVG/SAS thing was a red herring. Do try now to think what could have happened to bring this malware attack about.

I prefer to pay for...

Your list seems clean to me. Have you done any of the checks I suggested?


I'm wondering whtehr the firewall function of AVG is interfereing with itself. Or do you need both SAS and AVG? I...

As I said (Judy), no conflict netween our advices - except perhaps that I'll always do the regedit to make sure make sure. If the registry's clean, nothing lurked that the anti-malware didn't detect....

My above reply was typed before jholland1964 added his sensible advice. We both want you to make sure and there is thus no conflict between both sets of follow up advice.

Well done. I would adviseyou ro do one more thing.

Go to each of the following locations in turn:
C:\ Look for recent .EXE or .BAT files with a date around the time of your first event
...

85.255.113.132,85.255.112.84

The lines with this IP address are the problem. Needs dealing with immediately IMHO.

Read the sticky posts in the spyware forum and follow the advice there to...

Well done. Please mark this thread as solved.

Heidi - glad you reached the conclusion you did¬!

Anyway, the cleanest way of starting from scratch with the PC is boot from CD (any bootable CD with utilities - if it's the Windows CD use the...

You're well infected. Lots of DLLs like tuvuusSl.dll.

Have a look at other posts involving Crunchie and take the actions recommended/detailed there.

You could probably work your way through it...

Just to add to Crunchie's advice, comparing HJT logs, your situation has worsened as evidenced by these entries (at least):

O2 - BHO: (no name) - {65940327-f4c6-4b9a-ad8a-3456d6272b1a} -...

If nobody else replies with one of the "standard" methods you'll find in most threads, and since you've been working on this for a few days (the way I would have), you cold do worse than search the...

heidi - you've still got my method try try if you have a second PC. That, of course, will only work if the rogue software hasn't actually destroyed your boot.ini.

But, on balance, I reckon you're...

I think you could do with cleaning your registry out to deal with those "file missing" cases.

I would also remove BitCometHO.dll from your system and registry as this snoops on you.

XAUDIO.EXE...

Did you search this site and come across this post?
http://www.daniweb.com/forums/thread163930.html

You're lucky (I hope) - you've two methods on offer including MBAM from Jholland1964 (Judy). f...

There are two ways of curing this that I know of - although my experience with this is XP not Vista.

1/
On one PC, I had a similar/same message. This turned out to be a registry problem which...

... Not exactly - but Windows need "repairing" in my circumstances.

Being pedantic here, Windows Repair requires the Repair Console which, as you well know, enables a bunch of DOS type utilities...

... Not exactly - but Windows need "repairing" in my circumstances.

Being pedantic here, Windows Repair requires the Repair Console which, as you well know, enables a bunch of DOS type utilities...

I had a similar (but not identical) problem with my XP 64 system; I couldn't display any system properties in the admin screen and my AV system was reported as not present. On loading, Windows said...

Did you google Spyware Guard 2008? It would seem that the web is full of advice on how to remove this malware. There is a manual method described at:...

For everyone's benefit this is what you originally posted in someone else's thread:



You also said in another post:


First, the HJT log looks clean to me. I couldn't see a key logger. ...

Interesting question.

In my past experience (and I've dumped Norton as it's proved well below par where trojans are concerned), Norton supports there pas versions if you pay the renewal. At...

Well done,. Do please mark this threadas SOLVED.