Search:

Thank you so much for your help Shaba! I really appreciate it!

Yeah, just tell me what to do.

Oh... But how do I delete those files? I ran a search on Windows Explorer and there's more files in C:\Qoobox than the ones indicated in the Kaspersky scan and they are all listed as text documents...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:10:38 AM, on 9/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
...

There are still remnants of the old trojans. Here's the log:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Monday,...

It's at C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1152\A0308905.sys

I did another scan with spybot an hour later and it came out clean. However, I got this warning from AVG about Trojan horse Rootkit-Pakes.R saying it was detected at start. It has since been...

HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:17:19 PM, on 9/27/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot...

I'm posting the HijackThis log subsequent post. Here's the ComboFix log:

ComboFix 09-09-25.01 - Clarence Gan 09/27/2009 12:45.1.1 - NTFSx86
Microsoft Windows XP Professional ...

Hi Shaba, thanks for helping. Here's the log.

GMER 1.0.15.15087 - http://www.gmer.net
Rootkit scan 2009-09-26 12:53:50
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver:...

I ran spybot 2 days ago and it found about 6 of these trojans courtesy of visiting questionable sites (I think). However, they kept coming back after multiple removal attempts with Spybot and I'm...