Hya kIRA, sorry for the late reply. I seem to have missed your last post somehow but got your PM.



Try a Panda online AV scan here:

PC Help Forum.com - Computer Tech Support

And post the log if it finds anything please, and also post a log from this tool:

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply



And you could also run this app to see if it might be a prob with your pc's memory:

Memtest86+ - Advanced Memory Diagnostic Tool

hello,

first of all i wish to say thank you for taking your time to help me. THANK YOU!

ok here is what Panda scan found

Incident Status Location
Potentially unwanted tool:application/mywebsearch Not disinfected c:\program files\MyGlobalSearch
Adware:adware/broadcastpc Not disinfected c:\program files\tvs
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@888[1].txt
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@888[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@belnk[1].txt
Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@cassava[1].txt
Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@cgi-bin[2].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@did-it[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@dist.belnk[2].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@go[1].txt
Spyware:Cookie/Screensavers Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@i.screensavers[1].txt
Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@landing.domainspons or[1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@realmedia[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@uol.com[2].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Kirill\Cookies\kirill@xiti[1].txt


and here is the combofix log

Kirill - 06-09-24 19:57:45.57 Service Pack 2
ComboFix 06.09.23.2 - Running from: "C:\Documents and Settings\Kirill\Desktop"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\bszip.dll

((((((((((((((((((((((((((((((( Files Created from 2006-08-24 to 2006-09-24 ))))))))))))))))))))))))))))))))))

2006-09-11 08:34 724,992 --a------ C:\WINDOWS\system32\RhinoShExt.dll
2006-09-10 03:14 417,792 --a------ C:\WINDOWS\system32\vbscript.dll
2006-09-09 00:31 513,584 --a------ C:\WINDOWS\system32\LVUI2RC.dll
2006-09-09 00:31 4,770 --a------ C:\WINDOWS\system32\Repository.reg
2006-09-09 00:31 263,728 --a------ C:\WINDOWS\system32\lvcodec2.dll
2006-09-09 00:31 210,480 --a------ C:\WINDOWS\system32\LVUI2.dll
2006-09-09 00:31 116,272 --a------ C:\WINDOWS\system32\lvcoinst.dll
2006-08-29 13:13 24,576 --a------ C:\WINDOWS\CmiUSB2Uninstall.exe

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )))

2006-09-24 14:52 -------- d-------- C:\Program Files\MSN Messenger
2006-09-22 21:42 -------- d---s---- C:\Documents and Settings\Kirill\Application Data\Microsoft
2006-09-22 21:40 -------- d-------- C:\Program Files\Windows Live Safety Center
2006-09-19 13:33 -------- d-------- C:\Program Files\ewido anti-spyware 4.0
2006-09-19 09:26 -------- d-------- C:\Program Files\Rhinoceros 3.0
2006-09-15 13:10 -------- d-------- C:\Program Files\AdwareAlert
2006-09-12 07:12 737280 --a--c--- C:\WINDOWS\iun6002.exe
2006-09-12 07:12 -------- d-------- C:\Program Files\Freecorder
2006-09-12 07:10 -------- d-------- C:\Program Files\Direct WAV MP3 Splitter
2006-09-12 05:29 -------- d-------- C:\Program Files\RegistrySmart
2006-09-12 05:29 -------- d-------- C:\Program Files\Registry Mechanic
2006-09-12 03:48 -------- d-------- C:\Program Files\AWS
2006-09-11 22:27 -------- d-------- C:\Program Files\RegCure
2006-09-11 08:34 -------- d-------- C:\Program Files\Common Files\McNeel Shared
2006-09-11 08:34 -------- d-------- C:\Program Files\Common Files
2006-09-09 05:56 -------- d-------- C:\Program Files\Spyware Doctor
2006-09-09 05:54 -------- d-------- C:\Documents and Settings\Kirill\Application Data\Lavasoft
2006-09-09 00:31 -------- d-------- C:\Program Files\Common Files\Logitech
2006-09-09 00:30 -------- d-------- C:\Program Files\Logitech
2006-09-03 01:50 -------- d-------- C:\Program Files\Conquer 2.0
2006-08-29 13:13 -------- d-------- C:\Program Files\C-Media USB Sound
2006-08-21 08:21 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 05:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-21 05:14 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-12 14:10 -------- d-------- C:\Program Files\Internet Explorer
2006-08-07 12:56 -------- d-------- C:\Program Files\Mythic Blades Demo
2006-07-29 19:32 48936 --a------ C:\WINDOWS\system32\sirenacm.dll
2006-07-27 09:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-25 18:56 60078 --a------ C:\Documents and Settings\Kirill\Application Data\NMM-MetaData.db
2006-07-25 18:07 -------- d-------- C:\Documents and Settings\Kirill\Application Data\DataLayer
2006-07-25 18:06 -------- d-------- C:\Documents and Settings\Kirill\Application Data\Nokia Multimedia Player
2006-07-25 18:00 -------- d-------- C:\Documents and Settings\Kirill\Application Data\Nokia
2006-07-25 17:31 -------- d-------- C:\Program Files\Nokia
2006-07-25 17:31 -------- d-------- C:\Program Files\Common Files\PCSuite
2006-07-25 17:31 -------- d-------- C:\Program Files\Common Files\Nokia
2006-07-24 22:41 -------- d-------- C:\Documents and Settings\Kirill\Application Data\Adobe
2006-07-21 04:24 72704 --a------ C:\WINDOWS\system32\hlink.dll
2006-06-26 10:09 323624 --a------ C:\WINDOWS\system32\wiaaut.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.ex e"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\jusched.exe"
"Apoint"="C:\\Program Files\\Apoint\\Apoint.exe"
"IntelWireless"="C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe /tf Intel PROSet/Wireless"
"PCMService"="\"C:\\Program Files\\Dell\\Media Experience\\PCMService.exe\""
"Dell QuickSet"="C:\\Program Files\\Dell\\QuickSet\\Quickset.exe"
"DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
"UpdateManager"="\"C:\\Program Files\\Common Files\\Sonic\\Update Manager\\sgtray.exe\" /r"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.ex e"
"OpwareSE2"="\"C:\\Program Files\\ScanSoft\\OmniPageSE2.0\\OpwareSE2.exe\""
"StormCodec_Helper"="\"C:\\Program Files\\Ringz Studio\\Storm Codec\\StormSet.exe\" /S /opti"
"KAVPersonal50"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus Personal Pro\\kav.exe\" /minimize"
"PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOK IAP~1\\LAUNCH~1.EXE -startup"
"LogitechCommunicationsManager"="\"C:\\Program Files\\Common Files\\Logitech\\LComMgr\\Communications_Helper.ex e\""
"LogitechQuickCamRibbon"="\"C:\\Program Files\\Logitech\\QuickCam10\\QuickCam10.exe\" /hide"
"LVCOMSX"="\"C:\\Program Files\\Common Files\\Logitech\\LComMgr\\LVComSX.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="about:Home"
"SubscribedURL"="about:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,20,01,00,00,00,00,00,00 ,80,04,00,00,84,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00 ,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff ,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23 ,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\policies\explorer]
"EditLevel"=dword:00000000
"NoRun"=dword:00000000
"NoClose"=dword:00000000
"NoSaveSettings"=dword:00000000
"NoFileMenu"=dword:00000000
"NoCommonGroups"=dword:00000000
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless
HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\RegCure.job

Completion time: Sun 09/24/2006 19:58:46.21
ComboFix.txt

Do you know what this is from?

C:\WINDOWS\system32\Repository.reg

If not, can you rightclick the file, select "open with" , then select notepad but before pressing OK make sure "always use the selected.." is NOT checked, then press OK and then copy the contents of the text file that comes up to a post here please.



Download KillBox by Option^Explicit from HERE.

Double click on Killbox.exe and then check the delete on reboot button.
Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\iun6002.exe


Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)




Then go to this site:

VIRUSTOTAL - Free Online Virus and Malware Scan

And upload this file:

C:\WINDOWS\CmiUSB2Uninstall.exe

When done, post back with the result of the scan please.

ok, i dont know what this file is, or where it came from, i am pretty bad wiht computers as you can see, im sorry.

but here is what this file is

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Logitech\FTERep]
"Repository0031"=hex:87,c7,f5,93,b2,87,b7,4f,68,9e ,7f,84,d5,a9,bd,42,21,62,23,1a,7a,13,b5,8e,fd,24,f 2,16,d3,90,48,b4,20,e4,5b,de,de,5b,cc,ed,eb,0a,65, 72,f8,47,02,a6,bb,4e,b8,b9,6b,a5,07,75,ed,5a,15,bf ,61,7a,70,5d,8f,2b,85,12,6f,5e,88,0d,46,c6,0a,db,2 3,0b,8e,93,d6,19,03,e9,fe,32,4d,34,3e,a3,19,02,67, 9e,d0,10,54,12,55,82,17,c9,f6,7d,48,a6,e6,48,4c,a9 ,2e,36,bd,6f,a2,d2,3b,3a,b9,a0,eb,4b,a6,ac,29,8b,7 e,ea,e7,6a,6f,bf,b9,0f,03,e7,ba,7b,19,f7,d1,56,c3, 6d,71,b1,aa,75,8c,fb,43,dc,e2,43,bf,a1,7a,72,2d,2b ,fc,45,1a,29,a9,75,3b,89,ad,d4,eb,0e,0f,c0,c1,d5,5 1,9f,3a,c3,a1,97,c6,05,dc,49,23,f0,d1,75,33,04,98, 5e,68,59,0e,a6,63,cd,b6,62,cb,2b,c1,9d,79,dd,e5,59 ,26,8c,16,48,28,03,7d,ac,10,1a,5f,15,a0,7a,f9,4d,2 b,b7,3d,a9,97,fe,9f,08,59,d0,eb,10,6d,e4,f5,95,4c, e7,e6,ad,b9,67,da,de,a9,a1,72,89,82,09,a3,83,39,0a ,aa,18,2f,26,56,68,d3,f5,bc,cb,68,14,d5,60,1e,3b,3 1,60,39,21,fc,d1,82,10,ea,de,92,d0,8b,7f,3c,4b,5b, 85,9e,d3,57,29,10,cd,5b,d5,3c,fe,43,56,f6,4d,c5,fb ,b2,62,ed,11,e9,1d,2c,4b,a1,1c,d7,d0,2d,d3,7d,2e,0 3,e0,2b,eb,14,80,db,fd,68,a8,1e,8e,fb,01,8c,e3,41, 82,6b,5d,99,04,8d,81,a4,f5,81,e1,78,87,85,8e,dd,cd ,3d,fa,13,d4,bb,c4,57,58,f1,52,39,51,82,85,a3,8d,9 c,16,2b,0b,d1,20,fe,f1,b6,02,78,85,2f,c7,45,55,d0, c0,53,aa,8f,d2,39,a6,2d,68,21,e1,fa,7d,cb,50,32,a3 ,66,0d,3c,60,d7,f0,ac,b3,25,de,91,03,2c,07,8a,55,6 c,96,0d,02,ad,08,b5,d5,66,66,5d,80,f8,b9,11,5e,3e, e2,0d,ff,60,f4,62,fe,5b,a4,0b,a7,d9,13,1a,61,ce,a9 ,04,43,6e,4e,15,78,1d,e1,2a,81,b6,fd,2c,2d,43,ac,6 5,22,ee,e2,85,39,6e,b4,56,5a,34,78,83,ce,92,d8,c1, 82,2b,5a,24,7c,f0,4f,2a,91,41,02,b4,7e,88,f1,31,80 ,db,b8,45,1f,c5,4c,96,74,15,8e,f3,96,9f,9f,99,17,8 3,f7,ba,30,9f,08,4c,3f,37,83,0e,5b,0a,f2,42,39,4a, 27,28,cb,d0,03,27,ec,08,c4,ea,ac,3e,d2,6a,89,54,ff ,61,57,8c,16,f7,b6,a3,c5,6e,fb,e8,d5,80,8d,bf,e0,7 f,b4,84,4b,d4,ec,36,62,b2,08,db,63,c5,f3,cc,88,a8, e8,a1,ad,da,fc,50,60,e1,20,9f,c7,14,74,5b,5e,15,ea ,0c,2e,3a,c7,c9,d0,a6,a9,91,0c,54,1c,ba,ad,7e,1b,e 1,64,99,80,34,83,19,ae,15,cf,65,47,fa,61,21,75,66, 1b,23,70,b9,4c,20,29,85,b5,eb,5e,80,5a,df,09,bb,a6 ,54,3b,8d,ed,32,be,ae,36,89,4a,13,df,b7,25,b7,a4,6 f,84,cc,29,c7,2a,6f,f6,a6,54,03,07,76,34,83,17,8e, 54,c4,9e,19,27,7d,df,41,1d,25,a5,19,e9,14,02,52,fd ,d5,bf,c3,10,49,77,67,f4,6b,aa,b6,46,08,d7,b5,ac,2 7,48,91,3c,f4,04,96,05,68,d8,d5,ff,6c,10,b0,8c,64, 26,a9,f5,8f,32,a1,1f,50


ok here is the VIRUSTOTAL scan results, it did not find anything,

STATUS: FINISHED
Complete scanning result of "CmiUSB2Uninstall.exe", received in VirusTotal at 09.26.2006, 10:50:25 (CET).


AntivirusVersionUpdateResultAntiVir7.2.0.1809.26.2 006 no virus foundAuthentium4.93.809.25.2006 no virus foundAvast4.7.844.009.25.2006 no virus foundAVG38609.25.2006 no virus foundBitDefender7.209.26.2006 no virus foundCAT-QuickHeal8.0009.25.2006 no virus foundClamAVdevel-2006042609.26.2006 no virus foundDrWeb4.3309.26.2006 no virus foundeTrust-InoculateIT23.73.509.26.2006 no virus foundeTrust-Vet30.3.310009.25.2006 no virus foundEwido4.009.26.2006 no virus foundFortinet2.82.0.009.26.2006 no virus foundF-Prot3.16f09.25.2006 no virus foundF-Prot44.2.1.2909.25.2006 no virus foundIkarus0.2.65.009.26.2006 no virus foundKaspersky4.0.2.2409.26.2006 no virus foundMcAfee485909.25.2006 no virus foundMicrosoft1.160309.26.2006 no virus foundNOD32v21.177509.26.2006 no virus foundNorman5.90.2309.25.2006 no virus foundPanda9.0.0.409.25.2006 no virus foundSophos4.10.009.26.2006 no virus foundSymantec8.009.26.2006 no virus foundTheHacker6.0.1.08109.26.2006 no virus foundUNA1.8309.25.2006 no virus foundVBA323.11.109.25.2006 no virus foundVirusBuster4.3.7:909.25.2006 no virus found

Aditional InformationFile size: 24576 bytesMD5: 085670f174010249707f1d8e1da558e4SHA1: 7188ca516338e5df0bdfc1c97652d3f57829cf36


i hope this helps,

thank you for trying to help, i am most thankful

Both files seem to be ok, how is it going with your pc now?

And have you also tried the Memtest I posted?

unfortunatly it is exactly the same. i am sorrym, but i guess i am a total idiot, i could not figure out how to do the memtest.

thanks for trying though. i mean what is i jsut reinstall teh whole windows, will that help at all? i mean what should i do to stop this, because now i have to use programs and the error messages are really unnoing.

i really apresiate your help, but i guess it is not meant to be lol, thank you very much. i dont want you to waist any more time on me.


thank you very much!