Posts by DMR

So, I tried to reload the disks that came with her computer (HP)

But, it didn't work...

Can you elaborate on the "it didn't work" part please? Any and all specifics that you can give us might be helpful.

Most likely, you can't fix them. CRC errors usually mean that the source files (in your case, some of the MP3s you burned to CDs) are corrupted. :(

Did you do a verify operation on the CDs after the burns? If so, that probably would have told you at the time that some of files didn't transfer/burn correctly.

Give us the full and complete text of the specific errors please.

1. For the " C:\System Volume Information\_restore..." problems that Norman reports, please see the following post for more information:

http://www.daniweb.com/techtalkforums/showpost.php?p=141959&postcount=2

2. As for the svchost error reports:

svchost.exe is a Windows component which manages many other Windows programs. Given that, and the fact that the specific error messages give only "sz:AppName: szAppVer:0.0.0.0 szModName: unknown szModVer:0.0.0.0 offset:00000000", there's no helpful inforamtion there to help us determine the exact program or module which is causing the error.

Can you tell us which programs are running when you get these errors? That info might help us narrow things down.

Also-open the Event Viewer utility in your Administrative Tools control panel and have a look through the System and Application logs for entries flagged as "Warning" or "Error".
Double-clicking on any of those entries will open a "details" window with more information about the error/warning. If you find any entries that seem to relate to the problem(s) that you're having, post the full and exact contents given in the detail windows.

Registry Mechanic is one such program.

Good work- your latest HJT log looks much cleaner. :)

Still a bit of clean-up to do though:

1. Uninstall SpyFighter; the program has a dubious reputation at best. You can find more info about SpyFighter and other disreputable and/or outright bogus "anti-spyware" products at this site. Before downloading any free anti-spyware programs, it's a good idea to consult that site.

2. Run another HijackThis scan, put a check mark in the box to the left of the following entries, and then click the "Fixed Checked" button:

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [javajw.exe] C:\WINNT\javajw.exe
O4 - HKLM\..\Run: [SpyFighterUpdate] "C:\Program Files\SpyFighter\AutoUpdate.exe" silent
O4 - HKLM\..\Run: [SpyFighterMonitor] "C:\Program Files\SpyFighter\SpyFighter.exe" monitor
O16 - DPF: {739E8D90-2F4C-43AD-A1B8-66C356FCEA35} (RunExeActiveX.RunExe) - hcp://system/RunExeActiveX.CAB

3. Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types". Locate and delete the C:\WINNT\javajw.exe file.

4. Empty yout Recycle Bin and then reboot.

5. Run HijackThis again and post the new log.

Erm:

Other computer hijackthis log

Which other computer, and what exact problems are you experiencing? Or did you mean to post this as a response in one of your other threads as opposed to starting a new thread here?

Hi CooperS,

1. Download ewido Security Suite and install it, and then open the program. If you initially receive a warning message saying "Database not found" when you first run the program, just click "OK" for this. Next- in the main screen, click "Update" and click "Start Update". After the update process, exit from Ewido; do not actually have it scan your system yet.

2. Open Norton Anti-Virus and use the Live Update feature to make sure you have the absolutely most current virus definition databases installed. Close the program after that.

3. Run HijackThis again and have it fix the following:

O4 - HKLM\..\Run: [Wins Service Driver] winet.exe
O4 - HKLM\..\RunServices: [Wins Service Driver] winet.exe
O4 - HKCU\..\Run: [Wins Service Driver] winet.exe
O4 - HKCU\..\RunServices: [Wins Service Driver] winet.exe

4. Reboot into Safe Mode and:

* Run a full system scan with ewido; let it fix everything it finds.

* Run a full system scan with Norton.

* Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types". Search for and delete all instances of winet.exe that you find.

* Empty your Recycle Bin.

5. Reboot normally, run a scan with HijackThis again, and post the new log. Also post the …

Try this, since you have XP SP2, there's a built-in command to repair LSP...

Thanks for the pick-up, swatkat. :)

There's only one problem indicated in your HJT log:

O10 - Broken Internet access because of LSP provider 'xfire_lsp_9028.dll' missing

You can fix your broken LSP stack with the free WinsockXPFix utility. The program is very easy to use; a tutorial can be found here.

Good- the main "nasties" are no longer present in your latest log.

A couple of things, though:

1. MessengerPlus! 3 has a "Sponsored" installation mode, and if installed in this mode, the program will install adware on your system. If you are unsure of which installation mode you chose, you should uninstall the program and then reinstall it without the Sponsor option.

2. The following log entry is a loose end which should be taken care of:

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

To do this:

A) Open the Services utility in your Administrative Tools control panel.

- In the list of services, locate the service named "Remote Packet Capture Protocol" or "rpcapd" and double-click on it.

- In the General tab of the Properties window that opens, click the Stop button if the service is not already stopped.

- Once the service is stopped, choose Disabled in the "Startup Type" drop-down menu and then click OK. Close the Services utility after that.

B) Run HijackThis again, do another scan, and put a check in the box to the left of the O23 - Service: Remote Packet Capture Protocol v.0 entry, and then click "Fix Checked".

C) Once HJT finishes the fix, click on the "Config" button in the lower right corner of HijackThis' main window. In the next window click on the …

I would suspect either you still have a virus...

I hope that's not the case, considering the fact that this thread was abandond about 9 months ago. :mrgreen:

Due to the fact that the member who originally started this thread has not responded in 9 months, this thread is considered abandoned and has been closed.

In accordance with our posting rules, other members having similar problems should start their own threads and post their questions there. In order to help us help you most quickly, please include as much information about your problem as possible in your posts.

If the member who originally started this thread wishes to have the thread reopened, please send your request, including a link to this thread, to one of our moderators via email or Private Message.

Thank you.

Hi FreddyCoupler,

If you have a brand new install, it might be more time-efficient to just install again, but the choice is really up to you. If you do decide to go with a fresh install, the following link has good information about the protective measures you should put in place immediately after reinstalling XP:

http://www.daniweb.com/techtalkforums/thread27519.html

If you decide to go through the cleaning instructions that swatkat posted, please start your own thread and post your information there. Mostly for clarity's sake, our site's Forum Rules prohibit members from "tagging" their questions onto a thread started by another member.

Hi Seizurebear,

Welcome to DaniWeb! :)

You may have done some of the this already, but please follow the procedures below completely:

You will need to disconnect from the Internet for some of the following, so you'll need to print out the following instructions, or save them into a text file with Notepad.

1. Download, install, and run these CWS/HSA/About:Blank - specific removal tools:

CWShredder - http://www.intermute.com/spysubtrac...r_download.html
about:Buster - http://www.majorgeeks.com/AboutBuster_d4289.html
HSRemove - http://www.majorgeeks.com/HSRemove_d4286.html
Sp.html-Se.dll Hijack Fix - http://www.majorgeeks.com/Sp.html-S...00XP_d4617.html

2. Run at least two or three of the following online anti-virus/anti-spyware scans and let them fix what they can:

http://www.kaspersky.com/scanforvirus.html
http://housecall.trendmicro.com/
http://us.mcafee.com/root/mfs/default.asp?cid=9914
http://www.pandasoftware.com/active...n_principal.htm
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/scan/licence.php

3. Download, install, and run the following (free) detection and removal tools (use each program's online update function before running them to make sure you have the most current updates installed).

After each utility completes its fixes, reboot before continuing on to the next utility; have the utilities fix all of the problematic/malicious items they find:

ewido Security Suite - http://www.ewido.net/en/download/
Microsoft Anti-Spyware beta - http://www.microsoft.com/downloads/...&displaylang=en
Ad Aware SE Personal - http://www.lavasoftusa.com/
SpyBot Search & Destroy - http://www.safer-networking.org/

4. Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as …

Hi Jay,

Your HijackThis log still indicates the presence of a few infections; please do the following:

1. To get rid of the "bridge.dll" error, run HijackThis again, put a check in the box to the left of the following entry, and then click the "Fix Checked" button:

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load

2. In addition to Spybot and Ad Aware, please download and install these two utilities:

ewido Security Suite - http://www.ewido.net/en/download/
Microsoft Anti-Spyware beta - http://www.microsoft.com/downloads/...&displaylang=en

3. Open ewido. You will receive a warning message saying "Database not found"; just click "OK" for this. Next, in the main screen, click "Update" and click "Start Update". After the update process completes, exit from Ewido.

4. Open MS Antispyware beta. Make sure the "AntiSpyware Autoupdater" feature is enabled, and that it has downloaded the most current antispyware updates. Close the program after you've verified this.

5. Reboot into Safe Mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up).

6. Run ewido and MS Antispyware beta consecutively (the order doesn't matter), and have both programs fix whatever they find.

7. - Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions …

Thanks for that info. Your latest HJT log is obviously cleaner than the first, but there are still signs of infections there. As I asked in my last post, can you please also post the ewido log? The ewido log could give us a better idea of exactly where the pieces of the remaining "nasties" are hiding.

Thanks.

You're fairly infested, so let's do the full drill:

1. Open your Add/Remove Programs control panel and uninstall the following programs if you find them listed:

Web Offers
Media Access

You will need to disconnect from the Internet for some of the following, so you'll need to print out the following instructions, or save them into a text file with Notepad.

2. Run at least two of the following online anti-virus/anti-spyware scans and let them fix what they can:

http://www.kaspersky.com/scanforvirus.html
http://housecall.trendmicro.com/
http://us.mcafee.com/root/mfs/default.asp?cid=9914
http://www.pandasoftware.com/active...n_principal.htm
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/scan/licence.php

3. Download, install, and run the following (free) detection and removal tools (use each program's online update function before running them to make sure you have the most current updates installed).

After each utility completes its fixes, reboot before continuing on to the next utility; have the utilities fix all of the problematic/malicious items they find:

ewido Security Suite - http://www.ewido.net/en/download/
Microsoft Anti-Spyware beta - http://www.microsoft.com/downloads/...&displaylang=en
Ad Aware SE Personal - http://www.lavasoftusa.com/
SpyBot Search & Destroy - http://www.safer-networking.org/

4. Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and …

One thing that might have happened is that Trend may not have fully finished "cleaning up"; you might want to run another scan to see if there were any loose ends left over from the disconnect.

Hi Kageri,

I've moved your question to our Web Browsers forum, as your problem regards IE.

You said that the connection "just stopped working"; can you give us more specifics if possible, please?

- Does IE at least open, or can you not even get it to run properly?

- What types of errors or other possibly helpful information does IE give you?

- Have you tried Microsoft's recommendations for repairing IE?

- Open the Event Viewer utility in your Administrative Tools control panel.

In the Event Viewer, look through the System and Application logs for entries flagged as "Warning" or "Error"; double-clicking on any of those entries will open a "details" window with more information about the error/warning. If you find any entries that seem to relate to the IE problem(s) that you're having, post the full and exact contents given in the detail windows.

- "Spyware" infections can break IE in a number of different ways. Have a look at the spyware-related info in this thread and some of the other threads in our Viruses, Spyware, and other Nasties forum.

Yes, you should be able to connect directly through Firefox once you've totally removed AOL, but depending on your network/Internet setup, you might have to make a couple of small adjustments.

- What type of Internet connection do you have (dial-up, DSL, etc.)?

- Are you connecting directly to the modem, or do you go through a router?

Hi eness2003,

Can you give us more details on your network setup please? Information such as the type of Internet connection (cable, DSL, etc.), and the makes/models of your networking devices (modem, router, etc.) would be helpful.

Sorry to have left you hanging for a few days, zion1.

As dlh6213 said earlier, your log is clean. Ad far as the random "generic host procecess" errors, open the Event Viewer utility in your Administrative Tools control panel and see if there are any more informative error/warning messages in your System and Application logs.

Hi grams79,

First of all- welcome to TechTalk!

We do ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules

Thanks for understanding.

Due to the fact that the member who originally started this thread has not responded in over one year, this thread is considered abandoned and has been closed.

In accordance with our posting rules, other members having similar problems should start their own threads and post their questions there. In order to help us help you most quickly, please include as much information about your problem as possible in your posts.

If the member who originally started this thread wishes to have the thread reopened, please send your request, including a link to this thread, to one of our moderators via email or Private Message.

Thank you.

Hi jfxcoll,

swatkat is right about the need for you to post your question/problem in a new topic of its own.

As stated in our Forum Rules, we do ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules

Thanks for understanding.

Glad you got it worked out.

Accounts can definitely get corrupted, and sometimes it can be impossible (or at least very time-consuming) to find and fix the exact problem. Creating a new account and migrating the user's data, as you did, is often the most sensible solution.

I'm afraid there's really no way for us to know exactly what Trend was doing at the time of the disconnect, and/or what the possible results of it not completing its tasks might be. However, my guess is that any effects you might experience won't be serious.

Hmmmmm, anybody smart enough to answer this?

Quite honestly, the answer is probably yes.

However, as you've posted your question in our "spyware" forum: is there anything that leads you to believe that malicious infections are the root of the problem? They usually aren't in cases such as you've described.

Due to the fact that the member who originally started this thread has indicated that their problem was solved, this thread has been closed.

In accordance with our forum rules, other members having similar problems should start their own threads and post their questions there. In order to help us help you most quickly, please include as much information about your problem as possible in your posts.

If the member who originally started this thread wishes to have the thread reopened, please send your request, including a link to this thread, to one of our moderators via email or Private Message.

Thank you.

And thank you for the followup; I'll mark this as solved now.

we like happy endings... :)

Hi dento,

First of all- welcome to TechTalk!

We do ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules

Thanks for understanding.

Thanks Dave!

You're welcome Danny; glad I could help. :)

Athersgeo,

In terms of your question about browsers, you're OK with Netscape if that's what you're comfortable with; switching to Firefox would be a matter of personal choice/preference.

Basically, both Netscape and Firefox are less susceptible than IE (at the present time, anyway) to the methods that most "spyware" infections use to get their hooks into your system, primarilly for the following reasons:

1) The majority of spyware infections rely, at least in some way, on the ability to exploit particular components of Internet Explorer such as Browser Helper Objects (BHOs) and ActiveX controls. Netscape, Firefox, and other non-Microsoft browsers are not based on those technologies, and as such, they are immune to attacks which use such exploits.

2) Internet Explorer is an integral component of the modern Windows operating systems themselves. That being the case, infections which can "take control" of IE via known vulnerabilities in that browser have greater access to your operating system as a whole than do infections which hook into third-party browsers such as Nescape or Firefox.

However, it is worth mentioning that IE can be made more secure by changing some of its default settings. A good run-down of the recommended settings can be found here.

Hi Larry,

There could be a few different reasons for that problem, but the cause is almost certainly not related to spyware. Given that, you should start a new thread for this particular problem in one of our forums under the Hardware category; one of those sub-forums would be more suited to that type of problem.

Does a new scan with HJT no longer list the WeatherBug entries? If so, please let us know so that one of us (the moderators) can mark this thread as "Solved".

Thanks.

1) A pretty definitive way to figure out if RAM in general is the root of the problem is to download and run the (free) memtest86 RAM-testing utility.

More info on from an earlier post of mine on the subject:

Download and run the free memtest86 RAM-testing utility. It runs from a bootable CD or floppy, and it will do a pretty thorough battery "stress tests" of your RAM and give you the results of any errors it finds. Let the test cycle run for a few hours or more for the best results.

Also- If you've got more than one RAM module installed, run the computer with only one of the modules installed at a time. If you find that the system only crashes when one particular RAM module is being used, replace that module.

2) Unfortunately, Outlook suffers from the same message/folder size limitations that Outlook Express does IIRC; if your problems lie in that area, a move to Outlook won't help. You said:

I'm well over 11,000 e-mails in my inbox & that's not including all the e-mail in all the folders I have under "Local Folders".

That could very well be what's doing you in; you need to be dilligent about deleting old/unwanted messages, or do periodic backups to some other location to get those old emails out of your "active" folders. I've had a few of my "real life" clients let the contents of their Outlook/OE folders grow too large, and the …

Hi Athersgeo,

dlh6213 asked for a "second opinion" on the cxid.exe file, so here it is:

The file almost certainly bogus/malicious.

1) Look carefully at the info in the bios-drivers.com link you posted: it states that a cxid.exe file is indeed part of a Cyrix driver upgrade package, but one related to 386/486-era processors. First- your machine certainly isn't that old, considering that you're running Windows XP, and second- Cyrix was gobbled up by Via Technologies years ago. In other words, Cyrix hasn't been a player in the computer chip business for ages.

2) Have a look back over the original ewido log you posted; that log has this to say about cxid.exe:

C:\WINDOWS\cxid.exe -> Spyware.180Solutions : Cleaned with backup

180Solutions is a well-known and well-hated maker of spyware/adware; if ewido identified cxid.exe as a component of some piece of 180Solutions malware, I'd believe that.

As far as your inability to locate the file, that could quite possibly be due to the fact that ewido said it deleted the file; the reference to cxid.exe that you see in your HJT log could just be a loose end. If you haven't done so already, run HJT again and have it fix:

O4 - HKLM\..\Run: [cxid] C:\WINDOWS\cxid.exe

After doing that, reboot your computer, run HJT again, and let us know if the above entry returns.

Outlook express will crash because it a java based program that rely on the ram working correctly.

No offence meant here, but all programs use RAM and rely on the physical memory working correctly. This has nothing to do with Java in particular, and additionally, since ep2002 has indicated that the problem is only with OE, that would not point to a problem with RAM in general.

This might shed some light on the real root of the problem though:

The problems I have are w/ OE. If I search & find too many different e-mails, it starts to crash...

If your problems really are only with OE, and you're also asking OE to deal with a very large number of messages, the cause is almost certainly not due to bad or mismatched RAM, but rather the fact that Outlook Express has known limitations in terms of the maximum size of its folders (Inbox, etc.). Iif you have allowed a huge number of emails to pile up in your different OE folders, the program will crash because you've exceeded (or are approaching exceeding) the size limit of those folders. The size limit on OE's files/folders was 2Gig last I checked, and I don't think that has changed recently.

No worries about delays in responses, Marshall- it happens to us as well.

Get back to us with the results when you can; we'll be here.

That's such a SAAD holiday.

Yeah, don't we know it... :mrgreen:

First of all- uninstall the "Content Delivery Module" through your Add/Remove Progams control panel.

If you're still experiencing problem after that, please do the following:

Download the (free) HijackThis utility:

http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe

Once downloaded, follow these instructions to install and run the program:

Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

Can you post the contents of the dump?

Glad that we at Daniweb could help you :D

As am I. :)

And to those who are looking at these instructions, they areally aren't as difficult as they appear initially if you do them step-by-step.

A good point, sldout1; thanks for mentioning that.

While many infections can be automatically removed by using anti-virus and anti-spyware programs, some infections (such as Aurora/Nail) are nasty enough that they cannot be removed by such programs.; hence the need for "manual" removal procedures.

As you said, the instructions for those procedures can definitely look difficult (if not absolutely incomprehensible) at first glance, but if followed step-by-step, they will work. We don't ask that anyone try to understand the steps involved, and nor do they need to.

However- people should be know that these kinds of removal instructions are tried and tested, and are the result of a lot of hard work and research done by a worldwide community of experts who dedicate much of their time to finding cures to the more persistent infections that the mainstream utilities can't cope with. In other words- the procedures are trustworthy, and if followed exactly, they will do the job.

Well, OK... a happy "System Administrator Appreciation Day" to the rest of you who do this thankless job for a living.

(For those of you who aren't sysadmins, all you need to read is the "Gift Ideas" section in the link below. ;) )

http://www.sysadminday.com/

Dani minimizes the DaniCrap...

Lol. DaniCrap?? [img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/jesterlaugh.gif[/img]

Chistian- is "DaniCrap" part of some new HTML/Web standard that I'm not aware of?

Hi Moonchild,

First of all- Welcome to our site.

Secondly- On behalf of the all of us who volunteer our time trying to help - I'm glad we were able to help you. :)

OK-

Your HJT logs and ewido scan indicate nothing obvious that would be causing these probelms, so can you check another area for possible clues please?:

Open the Event Viewer utility in your Administrative Tools control panel.

In the Event Viewer, look through the System and Application logs for entries flagged as "Warning" or "Error"; double-clicking on any of those entries will open a "details" window with more information about the error/warning. If you find any entries that seem to relate to the browser problems that you're having, post the full and exact contents given in the detail windows.

Good work on your follow-up regarding the error message and the issues revolving around older versions of Windows, VB, and WMI. That's where I was going with what I said in point B of my pervious post, but you seem to have gotten it sorted out already. :)

Let us know what happens after your sister has a chance to try things and get back to you. Also- I would like to see the report from the FindQoologic program if possible.

Thanks for the update.

When she ran "Track qoo" she got a "Scripting Error" but I think I may have disabled Java Scripting in IE , trying to help her, so now I am thinking that that may effect a VB Script, but I don't know. Would IE settings effect this program?

The scripting error might be due to related settings in the Internet Options control panel, but it could just as likely (or more likely) be due to one of the following:

A) Script-blocking is enabled in your anti-virus software, as mentioned in the Track_Qoo instructions I posted earlier.

B) The system is a Win 98 system, so it might not have current enough versions of the Visual Basic (VB) components to run the Track_Qoo VB script. I'm not sure if this is an issue with Track_Qoo specifically, but I know that it's an issue with some of other tools that we use which rely on VB in some way. I'll have to look in to that.

* As an alternative to Track_Qoo, can you please download FindQoologic.zip. Unzip the downloaded file into its own folder and double-click on FindQoologic.bat to run it. When finished, FindQoologic.bat will generate a report log; please post the contents of that log here.

Something isn't right here. There have been indications of at least 4 or 5 separate infections in your logs, but nothing you've done so far has had much of an impact on them. :(

You will need to disconnect from the Internet for some of the following, so you'll need to print out the following instructions, or save them into a text file with Notepad:

1. Go into your Add/Remove Programs control panel and uninstall NaviSearch and Surf Sidelick if you see them listed.

2. Run at least three of the following online anti-virus/anti-spyware scannerss and let them fix what they can (for some of these scans you need to specifically select the option to have them clean/delete the infections they find, otherwise they'll just do a scan):

http://www.kaspersky.com/scanforvirus.html
http://housecall.trendmicro.com/
http://us.mcafee.com/root/mfs/default.asp?cid=9914
http://www.pandasoftware.com/active...n_principal.htm
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/scan/licence.php

3. If you don't already have the most current versions of Ad Aware and Spybot, please download them from the links in my sig below and install them. Also download and install CCleaner, but don't run it yet.

4. Open Ad Aware, Spybot, Microsoft Antispyware, and ewido one at time and use each program's online update feature to make sure you have the absolutely most current spyware definition databases installed for each. DO NOT run scans with any of the programs yet; just close the programs …

Do any of your other programs exhibit abnormal behaviour at or after the point at which your browsers start acting up, or are the multiple window issues with browsers the only problems you see?