Hi there. I am new here so hello everyone.

My problem is that my firewall (comodo firewall pro) keeps producing the same alert to whatever program accesses the internet. It reads - "c:\windows\system32\spuiebhtqv.exe has modified ..... in memory. This is typical of virus, trojan, and spyware behaviour."

This has occurred since I downloaded a program (which I subsequently uninstalled). My anti virus program (antivir by avira) alerted me that 2 malicous objects were found (upon installation of the program I downloaded), which I chose to delete. I then ran my anti spyware scanner (super anti spyware) which found 6 adware tracking cookies. Then I ran a full system virus scan (nothing was found). Finally I used the kaspersky online virus scanner and once again nothing was found, however I am still getting the same warnings.

Oh and windows security centre (I have windows XP pro) alerted me that my anti virus was turned off, however my antivirus appeared to be in operation. Now windows security centre is saying that my anti virus is in operation.

However the alert "c:\windows\system32\spuiebhtqv.exe has modified ..... in memory. This is typical of virus, trojan, and spyware behaviour." is still coming up.

Do I have anything to worry about, if so what needs to be done?

Welcome to the forum

As that particular .exe file doesn't show up on any Google searches, I suggest you click on the Pre-Work link below and post the logs you generate back into this thread.

Sorry, but what pre work link?

This one http://www.pchelpforum.com/hijackthi...r-hjt-log.html

Sorry, I was not using my eyes!

OK all pre work done. I have attached the hijackthis log, the AVG antispyware report and the super antispyware log.

The program I was trying to install that caused the problem was called webviewer or something like that.

Other problems that I have been having are Mozilla firefox crashing, the page scrolling up and down seamingly at random, in addition to almost every program that accesses the net producing the firewall alert mentioned above. Also as I am writing this post the word processing is lagging.

I forgot to mention that I am also using comodo bioclean.

I have just located the log of the malware that was detected and remove when the problem started, it was 2 detections of the following (both identical):

Virus or unwanted program 'TR/Mailskinner.C.1 [TR/Mailskinner.C.1]'
detected in file 'C:\Program Files\WebMediaPlayer\WebMediaPlayer.exe.
Action performed: Delete file

Attached Files

	hijackthis.log (7.5 KB, 3 views)
	SUPERAntiSpyware Scan Log - 09-03-2007 - 00-07-43.log (887 Bytes, 2 views)
	Report-Scan.txt (62.0 KB, 2 views)

Oh does someone know whether a security team member will be online soon, so I know whether its worth saying up?