Search:

Done. Everything is running great, and I have made a donation. Thank you so much for your help.

Wow. Things are looking good. I ran Spybot and it found the Click.Giftload again along with a few other things. But when I cleaned them and rebooted, Click.Giftload did not show up in Spybot again...

Fresh DDS:

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Firstname Lastname at 14:21:47.46 on Sat 05/07/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_25
Microsoft Windows XP...

Here it is. It did find a threat and said it would cure on reboot.

2011/05/07 08:47:01.0046 5976 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
2011/05/07 08:47:01.0890...

Here is the new DDS log. Note that I am still getting random popups and Generic Host Process error messages.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Firstname Lastname at 1:17:11.92 on...

Here is the ESET log. I think the first part is from an earlier run a week ago.

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
#...

I updated Java and ran ComboFix with the script you provided. It asked to be updated to the latest version and I did. A restart was prompted and took several tries to work, as the computer often...

Here it is. Thank you for your help!

ComboFix 11-04-30.03 - Firstname Lastname 05/01/2011 1:31.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3325.1898 [GMT -4:00]...

New DDS Log and attach.txt attached. I ran DDS right after Combofix and without restarting.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Firstname Lastname at 23:28:30.84 on Wed 05/04/2011...

Combofix detected a rootkit, rebooted and then continued to run to completion. Here is the log:


ComboFix 11-05-04.02 - Firstname Lastname 05/04/2011 22:42:40.2.4 - x86
Microsoft Windows XP...

Just to try something a little different, I just clicked "Fix" again, then exited, then ran aswMBR again and did a Scan without rebooting. This produces different results with different lines in red...

Ok. I clicked "Fix" then rebooted. On reboot I had no icons, so I used CTRL-ALT-DEL to get Task Manager to Restart again. Once I was running with icons, I downloaded ANOTHER fresh copy of aswMBR...

Rebooted, downloaded a fresh copy and ran a scan again. Here is the log:

aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
Run date: 2011-05-04 01:47:39
-----------------------------...

I ran the "Fix." It said it was successful, then I rebooted. When I ran aswMBR again, it seems to me that the same problem is present. I tried this twice to be sure, shutting down and rebooting...

Thank you!! Here are the logs you asked for:

aswMBR version 0.9.5.247 Copyright(c) 2011 AVAST Software
Run date: 2011-05-02 22:47:51
-----------------------------
22:47:51.296 OS Version:...

Hello. I would very much appreciate your help. SpyBot detects Click.GiftLoad but doesn't remove it. The computer is acting strangely, including random popups, Generic Host Process errors, blue...