I have to split this up in two posts

Attached Files

log.txt (12.3 KB, 1 views)

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

Attached Files

log.txt (8.6 KB, 1 views)

Hya Dngortegae , welcome to PCHF.

Let's have a look what we can do for you.



Before fixing things with HijackThis Please Do the Following:


Show hidden files and folders:

For XP:

1. On the Tools menu in Windows Explorer, click Folder Options.
2. Click the View tab.
3. Under Hidden files and folders, click Show hidden files and folders.
4. If you see a warning message, click Yes.
5. Click Apply.
6. Click OK.

Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:

WinXP.

1. Click the Start button.
2. Right-click My Computer, and then click Properties.
3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

Please download CCleaner

Please Download RKFiles.zip

Create a new folder C:\Antispyware\RKFiles
Extract the contents of RKFiles.zip into the new folder you just created.



Next, Create a new Folder on Desktop. Name that Folder QOOLOGIC
Please download Findqoologic into the new Folder, and then unzip it into the new Folder.

uninstall "VCClient" in add/remove programs if present.



Then boot in safemode (hit f8 when booting up) and fix these with hjt:


Then delete the files in bold , run Ccleaner and delete these folders:


C:\Program Files\altpayV2
C:\Program Files\Common Files\VCClient
C:\Program Files\MediaPipe
C:\Program Files\MyWebSearch



Open the C:\Antispyware\RKFiles folder
Double click on RKFILES.BAT
Give it time to run. this may take a while.
Save the text file it creates.
It should save by default to C:\Log.txt

Next, open the QOOLOGIC Folder and Locate and double-click the Find-Qoologic.bat file to run it.
Wait until a text file opens, post it in a reply to your thread after doing the rest of what follows here.
It'll take a while to run a full scan so please be patient.



Restart into regular Windows mode and post the contents of C:\log.txt and the find-qoologic log plus a new hjt log , by attaching them to a post please.


Also i see a NewDotNet uninstaller was present , did you had an Newdotnet infection that was removed in the past?

C:\Antispyware\RKFiles

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

**Please read the rules (again) ALL logs must be attached as files and not posted into threads**

Not sure about the newdotnet. It is highly possible. Thank you for your help. I have been away on business and am back now.

Attached Files

log.txt (15.4 KB, 2 views)

Looks like you are clean. Only search for and delete this file:

C:\WINDOWS\LLVPVW.DAT and youre done.


Do you still have any problems?