Hey Antoine,

Thanks for that, it's a lot better. It looks like you have a couple of stubborn 180 solutions infections, and you are probably getting infected through your p2p software.

Let's see if we can't get you cleaned up. First, download Shoot the Messenger from my signature, then make sure to empty the Norton Protected Recycling Bin, Norton's Quarantine, SpySweeper's Quarantine, and AVG's Quarantine.

Run Shoot the Messenger, it is a very simple utility that will disable the unnecessary Windows Messenger, which leaves you vulnerable to PopUp attacks. Then run CCleaner, again, you can stay in Normal Mode for this. In Add/Remove Programs, uninstall Zango Toolbar, if there.

Locate and delete the following files/folders in bold, C:\Program Files\ZangoToolbar\Bin\4.8.3.0\ZbHostIE.dll.

Then close all open windows, and run HijackThis. Put a check next to the following and then hit Fix Selected Items.

I would also recommend that you uninstall Pando, it is probably where you got the infection from in the first place.

Reboot the PC, and rerun a new HJT log to post back here, as well as an update on how the PC is acting.

Looking forward to your reply,

TTFN

LGW

ok couldnt find teh nortons protected recycling bin so i just emptied teh normal recycling bin... the zango toolbar folder had more stuff in it then the files you had bolded but since teh zango toolbar folder itself was bolded i deleted teh entire folder and it took everything in it with it and there wasnt a regular uninstall option for pando so i just removed it using add and remove programs and it seems to be running smoothly now.. heers the new hjt log

see above

Hey Antoine,

Looking good, . I still see Windows Messenger showing up in your HJT log, but if you ran Shoot the Messenger, it should be disabled.

If you aren't showing anymore symptoms, I think we can mark this one as Fixed.

Looking forward to seeing you in the forums,

TTFN

LGW

Marked as Fixed.