It sounds as though you may be unfamiliar with the relationship between files and the filesystems on which they are created.

In your scenario, although technically it certainly is altered from...

Why- you celebrate, of course.... http://www.stevewolfonline.com/Downloads/DMR/Visuals/Smilies/party.gif

SmitfraudFix looks to have done its job, and your latest HijackThis log is clean. :)
...

We're not done yet- many of the infections were cleaned, and the symptom may have been removed, but pieces of the nastiest one (a Smitfraud/SpySheriff variant) are still active.

This is normal,...

There are a few different infections which display bogus alert warnings, let's see if we can find out which variant you have.
Please do the following:

You will need to close/quit all web browser...

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with...

OK- Install the most current updates for Norton and run a full system scan with it. Have it fix everything it finds.

There is some hidden component of the PCShield infection which is recreating...

1. Hmm... when/why did you uninstall Norton Antivirus? It was present in your first log, but not your latest. :?:


2. I think SpyBot's "Tea Timer" function may have gotten in the way of the fixes...

nrp46e-

I haven't forgotten the main issue here, but I'm only on my lunch break right now and don't have time to post the next steps for you; I'll do that later today.

Viewpoint is rarely knowingly downloaded and installed by the end-user; it usually comes bundled as an add-on to other sofware installations, or comes pre-installed on computers from companies with...

Hi nrp46e- welcome to DaniWeb :)


You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following...

If the state of your system allows:

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following...

Outlook Express doensn't have a lot of firepower when it comes to filtering/spam blocking, but you can create a Mail Rule which filters based on the sender's name. One common trait I saw with my...

Thanks for doing that- we actually prefer that members paste their logs directly into their posts; it makes it easier and faster for us to review the log that way.

1. I'd suggest uninstalling the...

I just worked through this issue with one of my clients last week, and we found that the "Mailer Daemon", "Failed Delivery", etc. messages were indeed coming from the outside, and were forged. They...

Yes, and that being the case, on top of Chalky's suggestion to run Spyware Doctor, please also do the following:

You will need to close/quit all web browser programs and disconnect from the...

Hello luism, welcome to DaniWeb :)

To begin with, please do the following:

Download the (free) HijackThis utility...

That's a clean log :)

Cool- glad you got it figured out. :)

The instructions for roguescanfix indicate the following:
Please note that when the program starts it will download a program from the Internet that it needs to use during the cleanup. If...

You are infected with the "VirusBurst" parasite, which is a member of the Smitfraud/SpywareQuake/etc. family of bogus antispyware products.

Description:
This application uses false positives and...

I'll be lurking around keeping an eye on the progress; I've got email auto-notification applied to this thread....

Not at all; please be my guest. Your knowledge of German will honestly be much more helpful than my lack thereof. :mrgreen:

And we're oh-so-glad you did. :D
If you can shed any licht on the subject, it would be much appreciated.

Unfortunately, without an English version of the manual, I'm kind of stuck. Every router's built-in configuration utility uses slightly different terminology, layouts, etc., so I can't really point...

Your log is clean. :)

In terms of the programs you mentioned:

* The McAfee components should all be left as they are.
* You don't need the Adobe "acrotray.exe" component running, but you'll...

* Download the XP .exe Registry fix file by right-clicking on xp_exe_fix.reg (http://www.stevewolfonline.com/Downloads/DMR/Tech%20Uploads/xp_exe_fix.reg) and choosing "Save link as..." or "Save...

That makes sense- the fewer network services you have up and running, the more bandwidth you have for everything else. :)

Hi chungkiap,

The behaviour you're seeing is apparently due to a security hole found in netapi32.dll, which (as of about Aug. 12th) is being exploited by hackers. Please do the following:

1....

Hi tyranny,

As stated in our posting rules, we ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not...

* From the l2mfix folder, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter, then press any key to reboot your computer. After a reboot, your desktop and...

* Click on the "Run..." option in your Start menu.

* In the resulting "Open:" box, type "cmd" (omit the quotes) and hit Enter. This will bring up a DOS window.

* At the DOS prompt, type the...

Hi arnibol,

First of all- welcome to DaniWeb :)

We ask that members not tag their questions on to a thread previously started by another member, regardless of how similar your problem might...

Oh, so we're both in the same boat, eh? I was hoping that you might at least be able to translate some of the settings for us. Hmm... I'll see what I can turn up while you're gone.

Only one thing come to mind at the moment, and that is: given the fact that the computer can connect to secure sites at other locations, I'd start looking at the home router's settings.

I'm on my...

Hi aliceryuryu,

First of all- welcome to DaniWeb :)

As per our forum rules (http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_policies), we ask that members not tag their questions on...

The logs look good :)
Are you still getting the error message?

That log file looks very light on content, but it does show one sign of malware. I suspect there are more "unwanted guests" lurking about.

Please do the following:

You will need to close/quit...

Great- glad we could help you get it sorted out. :)
Does everything seem to be back to normal now?

* Good- your new HJT log is clean, and ewido seems to have disinfected a few other malicious items. :)

* In terms of the TrustIn Contextual folder, it may have been deleted already, as it was...

Hi crazy girl, welcome to DaniWeb :)

While startup and/or shutdown problems can definitely be caused by non-malicious problems, I do see indications of at least one malware program in your HJT...