okk. did all that , but could not find 2 of the files u wanted me to delete
could not find these 2;

C:\WINDOWS\ifiacnnA.exe
w001bfc1.dll

-----------------------------------------------------

anyways, i got the other files uploaded for scanning and once again could not find the 3rd file (C:\\WINDOWS\\ifiacnnA.exe)


1st file seemed clean (C:\WINDOWS\system32\ibic03e4.sys)

here are the results anways;

Complete scanning result of "ibic03e4.sys", received in VirusTotal at 08.09.2006, 21:10:19 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.09.2006 no virus found
Authentium 4.93.8 08.09.2006 no virus found
Avast 4.7.844.0 08.09.2006 no virus found
AVG 386 08.09.2006 no virus found
BitDefender 7.2 08.09.2006 no virus found
CAT-QuickHeal 8.00 08.09.2006 no virus found
ClamAV devel-20060426 08.09.2006 no virus found
DrWeb 4.33 08.09.2006 no virus found
eTrust-InoculateIT 23.72.91 08.09.2006 no virus found
eTrust-Vet 30.3.3006 08.09.2006 no virus found
Ewido 4.0 08.09.2006 no virus found
Fortinet 2.77.0.0 08.09.2006 no virus found
F-Prot 3.16f 08.09.2006 no virus found
F-Prot4 4.2.1.29 08.09.2006 no virus found
Ikarus 0.2.65.0 08.09.2006 no virus found
Kaspersky 4.0.2.24 08.09.2006 no virus found
McAfee 4825 08.09.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1699 08.09.2006 no virus found
Norman 5.90.23 08.09.2006 no virus found
Panda 9.0.0.4 08.09.2006 no virus found
Sophos 4.08.0 08.09.2006 no virus found
Symantec 8.0 08.09.2006 no virus found
TheHacker 5.9.8.188 08.09.2006 no virus found
UNA 1.83 08.09.2006 no virus found
VBA32 3.11.0 08.09.2006 no virus found
VirusBuster 4.3.7:9 08.09.2006 no virus found

Aditional Information
File size: 1167 bytes
MD5: 3aec204e50821b44ecce58efde5421c8
SHA1: 87da43f364d0c051de0a3f6be281608e4eef5874
-----------------------------------------------------

here are the results for the second file (C:\WINDOWS\system32\ibic03e4.dll)

Complete scanning result of "ibic03e4.dll", received in VirusTotal at 08.09.2006, 21:16:20 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.09.2006 no virus found
Authentium 4.93.8 08.09.2006 no virus found
Avast 4.7.844.0 08.09.2006 no virus found
AVG 386 08.09.2006 no virus found
BitDefender 7.2 08.09.2006 no virus found
CAT-QuickHeal 8.00 08.09.2006 no virus found
ClamAV devel-20060426 08.09.2006 no virus found
DrWeb 4.33 08.09.2006 no virus found
eTrust-InoculateIT 23.72.91 08.09.2006 no virus found
eTrust-Vet 30.3.3006 08.09.2006 no virus found
Ewido 4.0 08.09.2006 no virus found
Fortinet 2.77.0.0 08.09.2006 W32/AXF!tr.dldr
F-Prot 3.16f 08.09.2006 no virus found
F-Prot4 4.2.1.29 08.09.2006 no virus found
Ikarus 0.2.65.0 08.09.2006 no virus found
Kaspersky 4.0.2.24 08.09.2006 no virus found
McAfee 4825 08.09.2006 Downloader-AXF
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1699 08.09.2006 no virus found
Norman 5.90.23 08.09.2006 W32/DLoader.ALXF
Panda 9.0.0.4 08.09.2006 no virus found
Sophos 4.08.0 08.09.2006 no virus found
Symantec 8.0 08.09.2006 no virus found
TheHacker 5.9.8.188 08.09.2006 no virus found
UNA 1.83 08.09.2006 no virus found
VBA32 3.11.0 08.09.2006 no virus found
VirusBuster 4.3.7:9 08.09.2006 no virus found

Aditional Information
File size: 61952 bytes
MD5: 3777737f5a10e7a9f5b987742f4dd2f8
SHA1: 178fdae9043a66c3bfa52b10ec1ea2a3e2fd8594
packers: UPX
----------------------------------------------------------

here is the new HJT! log;

hijackthis - 3.txt

thx 4 your time, hope 2 hear from u soon, thx!

1. Please download The Avenger by Swandog46 to your Desktop.

• Click on Avenger.zip to open the file
• Extract avenger.exe to your desktop

2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.

• Under "Script file to execute" choose "Input Script Manually".
• Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
• Paste the text copied to clipboard into this window by pressing (Ctrl+V).
• Click Done
• Now click on the Green Light to begin execution of the script
• Answer "Yes" twice when prompted.

4. The Avenger will automatically do the following:

• It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
• On reboot, it will briefly open a black command window on your desktop, this is normal.
• After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
• The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.

5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh HJT log.

ok i did download that avenger prog. but when i do as told it makes an error , here is the log that is saves after making the error, and due to the error it does nothing after,

//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////
Error: selected file does not appear to be a valid script.
Error code: 1813



wut should i do now???

heres an uploaded HJT! log anyways

hijackthis - 4.txt

What did you exactly copy?

Files to delete:
C:\WINDOWS\ifiacnnA.exe
C:\WINDOWS\system32\w001bfc1.dll
C:\WINDOWS\system32\ibic03e4.sys
C:\WINDOWS\system32\ibic03e4.dll

Just the above part, or did you select more?

ya thats what i copied , just the above part, i even tried em 1 by 1 but still the same error shows up,.......