Member Panel

Chicagoboy

Ok here are the log files. After ComboFix ran, I had to manually reboot the computer. I haven't installed the recovery console yet.

Pancake

Still more tmp files to remove.It will give you a lot more free space.

click on the Start button
select Programs
select Accessories
select System Tools
select System Restore
Start the System restore program.
Click the button next to "Restore my computer to an earlier time" and click the "Next" button.
A calendar will appear. Click on the date that you wish to restore Windows to. The box next to the calendar will show you the available restore points from that day. The ones marked "System Checkpoint" are the automatic ones that Windows XP created.
Choose the one you want, then click "Next". Don't pick a point too far back in the past,maybe one week back -- remember, any programs you installed since your restoration point may not work anymore,so you may have to reinstall them.
Reboot your PC.

===================================
Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad* and copy/paste the text in the quotebox below into it:

http://www.pchelpforum.com/hijackthi...tml#post252284
Suspect::[4]
C:\WINNT\system32\svchost.exe
C:\WINNT\explorer.exe
File::
C:\WINNT\Internet Logs\xDB217.tmp
C:\WINNT\Internet Logs\xDB216.tmp
C:\WINNT\Internet Logs\xDB214.tmp
C:\WINNT\Internet Logs\xDB213.tmp
C:\WINNT\Internet Logs\xDB212.tmp
C:\WINNT\Internet Logs\xDB215.tmp
C:\WINNT\Internet Logs\xDB211.tmp
C:\WINNT\Internet Logs\xDB20F.tmp
C:\WINNT\Internet Logs\xDB210.tmp
C:\WINNT\Internet Logs\xDB20E.tmp
C:\WINNT\Internet Logs\xDB20D.tmp
C:\WINNT\Internet Logs\xDB20C.tmp
C:\WINNT\Internet Logs\xDB20B.tmp
C:\WINNT\Internet Logs\xDB20A.tmp
C:\WINNT\Internet Logs\xDB209.tmp
C:\WINNT\Internet Logs\xDB208.tmp
C:\WINNT\Internet Logs\xDB207.tmp
C:\WINNT\Internet Logs\xDB206.tmp
C:\WINNT\Internet Logs\xDB205.tmp
C:\WINNT\Internet Logs\xDB204.tmp
C:\WINNT\Internet Logs\xDB203.tmp
C:\WINNT\Internet Logs\xDB202.tmp
C:\WINNT\Internet Logs\xDB201.tmp
C:\WINNT\Internet Logs\xDB1FF.tmp
C:\WINNT\Internet Logs\xDB1FE.tmp
C:\WINNT\Internet Logs\xDB200.tmp
C:\WINNT\Internet Logs\xDB1FD.tmp
C:\WINNT\Internet Logs\xDB1FC.tmp
C:\WINNT\Internet Logs\xDB1FA.tmp
C:\WINNT\Internet Logs\xDB1FB.tmp
C:\WINNT\Internet Logs\xDB1F8.tmp
C:\WINNT\Internet Logs\xDB1F9.tmp
C:\WINNT\Internet Logs\xDB1F7.tmp
C:\WINNT\Internet Logs\xDB1F6.tmp
C:\WINNT\Internet Logs\xDB1F5.tmp
C:\WINNT\Internet Logs\xDB1F4.tmp
C:\WINNT\Internet Logs\xDB1F3.tmp
C:\WINNT\Internet Logs\xDB1F2.tmp
C:\WINNT\Internet Logs\xDB1F1.tmp
C:\WINNT\Internet Logs\xDB1F0.tmp
C:\WINNT\Internet Logs\xDB1EF.tmp
C:\WINNT\Internet Logs\xDB1EE.tmp
C:\WINNT\Internet Logs\xDB1ED.tmp
C:\WINNT\Internet Logs\xDB1EC.tmp
C:\WINNT\Internet Logs\xDB1EB.tmp
C:\WINNT\Internet Logs\xDB1EA.tmp
C:\WINNT\Internet Logs\xDB1E7.tmp
C:\WINNT\Internet Logs\xDB1E9.tmp
C:\WINNT\Internet Logs\xDB1E6.tmp
C:\WINNT\Internet Logs\xDB1E8.tmp
C:\WINNT\Internet Logs\xDB1E4.tmp
C:\WINNT\Internet Logs\xDB1E5.tmp
C:\WINNT\Internet Logs\xDB1E2.tmp
C:\WINNT\Internet Logs\xDB1E3.tmp
C:\WINNT\Internet Logs\xDB1E0.tmp
C:\WINNT\Internet Logs\xDB1E1.tmp
C:\WINNT\Internet Logs\tvDebug.zip
C:\WINNT\Internet Logs\xDB1DE.tmp
C:\WINNT\Internet Logs\xDB1DF.tmp

Save this as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe
When finished, it shall produce a log for you. Post that log in your next reply.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
When CF finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will capture a file to submit for analysis.
Ensure you are connected to the internet and click OK on the message box. A browser will open. Simply follow the instructions to copy/paste/send the requested file.