Pancake

Carried out your instructions and enclose logfile of Combofix scan
Crackers

Will await your further advice after you have examined it --thanks


combofixlog.txt

Not all malware detectors are 100% prefect in picking up all malware. As for System 32,not all malware is found there.

I dont see anymore malware in your system now so you should be fine.


This will clear away any of the files and folders that were created by ComboFix.

Go to :
Start > Run then copy and paste the following highlighted text below into the box and click OK.



ComboFix /u

many thanks for your great help pancake

would you suggest I leave "combo" on desktop (just in case) --or delete it and start again IF anything like this occurs in the future

Also did you notice in log that it said "repair" module wasnt loaded -although I had dragged icon of it on top of Combo icon as instructed !

............still-not to worry --its sorted -and Im really grateful !!
You zapped it good an proper!!

Cheers
Crackers!

Its best to remove Combofix as it cannot be updated,a new version has to be installed every time. The recover console is no big problem if not installed.

Sorry Pancake

After all your efforts -switched on just now and AVG has warned ne that its still around --that ****** horse !!!

What now??PLEASE!
Crackers

here are latest logs
thanksmbam-log-2008-10-06 (08-30-42).txt

hijacklog.txt

Does AVG give you a path to the file ?

Ok.Lets go over it again.


Ok.Lets download ComboFix.exe. This will give me a better view to the files running and also hidden on your computer and also those in the registry..Please visit this webpage for downloading and instructions for running the tool:

Go here ======> A guide and tutorial on using ComboFix <====== Go here

Please ensure you read this guide carefully and install the Recovery Console first.This applies to XP Pro and XP Home users only.If you have SP3 installed you will need to use SP2.Do not use for Vista.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should get a prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

(1) Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
(2) Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

Caution: Never run and remove files with Combofix unless supervised by a qualified security analyst who is experienced in the use of Combofix. Mal use can cause serious computer problems

NOTE: Combofix prevents autorun of all CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you - please let me know.