I am running Windows XP on an AMD processor. The latest updates have been applied. I also use Panda Antivirus and SpyBot.

My PC has been acting strange for a couple of weeks.
- If I switch from one user to another, it reboots.
- If I leave it idling, it reboots every 15 minutes
- When I open a session. a message appears saying that my PC has recovered from a serious problem.

If I try to scan for a virus, the session closes after a few minutes and the system reboots.

If I run the antivirus in safe mode, it scans for a long time (900K+ files) and suddenly, a blue screen appears indicating a fatal problem and a memory dump. I tried 3 different software and the same thing happened every time.

I have included some files produced by Hyjack This.

Thanks in advance!

Attached Files

	Hijackthis Scan.txt (11.7 KB, 5 views)
	Hijackthis startuplist.txt (11.6 KB, 4 views)

Hello and welcome to PCHF,

Please download Combofix from one of these locations:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe http://subs.geekstogo.com/ComboFix.exe

• Take note that the links are case sensitive

Save ComboFix to the desktop. Note: It is important that it is saved directly to, and run from your desktop.
In the event you already have Combofix, please delete it as this is a new version.

• Close any open browsers.
• Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix.

1. Double click on combo.exe & follow the prompts. 2. When finished, it will produce a logfile located at C:\ComboFix.txt. 3. Attach the log in your next reply with a new hijackthis log. Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang. Do not proceed with the rest of the fix if you fail to run combofix

Thanks.

Your help is appreciated! I ran ComboFix. Its log as well as the HJT log are attached.

Thanks!

Attached Files

	ComboFix.txt (38.3 KB, 1 views)
	hijackthis.log (11.6 KB, 1 views)

I have been checking the way my PC now «behaves».

• Sessions do not close automatically anymore; 15 minute reboots thus do not happen.
• If I try to switch from one user to another, it still reboots.
• Still cannot run Panda Antivirus; it still scans for a long time (900K+ files) and suddenly, a blue screen appears indicating a fatal problem and a memory dump.

Cheers!

Download and scan with CCleaner
1. Starting with v1.27.260, CCleaner installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation. IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the toolbar-free or Slim versions instead of the Standard Build.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:
• Clean all entries in the "Internet Explorer" section except Cookies if you want to keep those. • Clean all the entries in the "Windows Explorer" section. • Clean all entries in the "System" section. • Clean all entries in the "Advanced" section. • Clean any others that you choose.
In the Applications Tab: • Clean all except cookies in the Firefox/Mozilla section if you use it.
• Clean all in the Opera section if you use it. • Clean Sun Java in the Internet Section. • Clean any others that you choose. 4. Click the "Run Cleaner" button.
5. A pop up box will appear advising this process will permanently delete files from your system.
6. Click "OK" and it will scan and clean your system.
7. Click "exit" when done.




Please perform a BitDefender Online Virus and Malware Scan

• Click on I Agree.
• An ActiveX warning box will appear, click on Install.
• Under Select What You Want To Check For Viruses.
• Please Check My Computer and Click Ok
• Now Click On Click Here To Scan
• Next, Click on Click here to export the scan report
• Save it to your Desktop.
• In your next reply, please include the Bitdefender log and a fresh Hijackthis log.

We are making progress! My PC is now behaving normally.

As you will see from the logs, I ran BitDefender and HJT twice. The first time, it found a malware and a trojan. The malware seemed «attached» to Panda Antivirus.

I uninstalled Panda (which I do not really like...) and ran BitDefender again. The malware was stil there, hidden somewhere else... No trace of the Trojan.

I suppose we will have to go for another round of actions to get rid of the resilient malware.

Which Antivirus would you recommend that I use afterwards?

Thanks again for your support!

Attached Files

	Hijackthis Report 1.txt (11.9 KB, 1 views)
	BitDefender Report 2.html (17.3 KB, 2 views)
	Hijackthis Report 2.txt (10.9 KB, 1 views)
	BitDefender Report 1.pdf (20.6 KB, 3 views)