Search:

yes, still here

done ! ////

yep, still here

I can remove it, but it come back everytime I scan

Right Media is still here, but you're right, no more click.giftload, sorry for that !

DDS :

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Tatiana at 22:20:46,30 on 04/04/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professionnel ...

Spybot report :

Click.GiftLoad: [SBI $89783858] Réglages utilisateur (Valeur du registre, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet...

Hi.

Computer is working fine, but I did a spybot check, and I found - again - the click.giftload.
I did not try to delete it since I understand that sybot could not delete it.
Do you need any...

All right.

Thanks A LOT for your time and help:bow:

step 3 is now done. I reboot and try again, and there were no problem this time...

About step 5, seems that I don't have firewall, that's weird, I thought I had one !

Should/can I remove these...

step 4 : done

last step : done :)

I'll try again step 3 now

I don't know, I'll try. But the lin doesn't load the exe anymore :/

step 1 & 2 : done

I have a spybot alert when I try to instal Adobe.

step 3 :

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
#...

Far better ! No more navigator/computer crash since the fix :)

step1 : done

step2 :

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6201

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: Intel___ rev.1.0. -> Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0

device: opened...

TDSSKiller :

2011/03/28 21:16:54.0309 1380 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/03/28 21:16:54.0559...

Antivirus Version Last Update Result
AhnLab-V3 2011.03.26.00 2011.03.25 -
AntiVir 7.11.5.79 2011.03.25 -
Antiy-AVL 2.0.3.7 2011.03.26 -
Avast 4.8.1351.0 2011.03.26 -
Avast5 5.0.677.0...

I removed utorrent, I didn't use it anyway.

Here is my log :

ComboFix 11-03-27.01 - Tatiana 28/03/2011 19:27:03.2.2 - x86
Microsoft Windows XP Professionnel ...

Here it is :

ComboFix 11-03-27.01 - Tatiana 28/03/2011 8:43.1.2 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1647 [GMT 2:00]
Lancé depuis: c:\documents and...

GMER (pt2) :

.text C:\WINDOWS\system32\ctfmon.exe[1572] ntdll.dll!NtEnumerateValueKey 7C91D2EE 8 Bytes JMP 0BADADE3
.text ...

GMER (pt1) :

GMER 1.0.15.15570 - http://www.gmer.net
Rootkit scan 2011-03-27 21:33:02
Windows 5.1.2600 Service Pack 3
Running: w1l3bdcc.exe; Driver:...

aswMBR :

aswMBR version 0.9.4 Copyright(c) 2011 AVAST Software
Run date: 2011-03-27 21:12:34
-----------------------------
21:12:34.046 OS Version: Windows 5.1.2600 Service Pack 3...

All right. then I'll try to celan & remove the malware, since I plan to change my computer soon.
Thanks for your answer, I'll do what you told me to do in the second psot and post my log after.

Thanks for your answer.

If I choose to reformat, can I just reformat the system disc (C:) and not the others dics ? Or do I have to reformat all the discs ?

If it's only C:, I'll do it, if it's...

Hi, I got a problem with Click.giftload. Spybot can't remove it. It seems that I'm not the only one with this problem.

Here is my DDS log, hope you will be able to help me.

Thanks

.
DDS...