Search:

Things are running a bit better than before... but still a tad slow. It took a little over 1 minute to load up the default IE page (msn.com), but the actual login process to the computer was better....

Here is the URL to the "ltmsg.exe" analysis -- http://www.virustotal.com/analisis/771f4d56e7de7e46682adb0f8b5936454165f4cd77bdfedca68d8d6326b8159c-1251057338

I also performed the Disk Cleanup as...

Before I ran the CFScript, I had my son check the computer to see how it was running. He said it is running better than when he had the viruses on it, *but* it was slower than it was before.

Here...

===================
Logfile of random's system information tool 1.06 (written by random/random)
Run by Adrian at 2009-08-19 22:15:55
Microsoft Windows XP Home Edition Service Pack 2
System drive...

I had to run ComboFix twice because it updated itself the first time.

===================
ComboFix 09-08-19.01 - Adrian 08/19/2009 21:36.2.1 - NTFSx86
Microsoft Windows XP Home Edition ...

It took about 6 hours to run (I think), but here it is --
...

Sorry for the delay. Here are the KLog and MBR logfiles. However, when I hit the "accept" button on the Kaspersky website, the language changed from English to what appears to be Russian. I...

As you requested...

============================
Malwarebytes' Anti-Malware 1.40
Database version: 2636
Windows 5.1.2600 Service Pack 2

8/16/2009 9:27:05 PM
mbam-log-2009-08-16...

Here is the RSIT "info.txt" --
==============================
info.txt logfile of random's system information tool 1.06 2009-08-16 12:53:18

======Uninstall list======

-->C:\Program...

Shortly after I did my initial post, I applied the latest def files to the AV client. It has since picked up these additional risks:

* C:\Documents and Settings\Adrian\nah_fban.exe --...

My son's computer picked up this "virus" on 20Jun @ 12:43pm, but I was only able to finally look at this computer tonight. (It had been shut off for exactly one month.) I was able to determine this...

I know how to manually add a website to the local hosts file to redirect it to 127.0.0.1... but I wanted to inquire about having Spybot add a malware website to its ever-growing list of hosts.
...

Since I had not heard back from anyone -- probably because I had a "reply" in there after my initial post -- my son decided it was best to wipe the computer hard drive. The computer had a hidden...

Here are the results from the online AV scanner (Kaspersky)...

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday,...

I was tasked to tackle my son's PC after he somehow got the Vundo trojan on his PC a couple of weeks ago. He thought he had gotten rid of it, but it got so bad that he gave it to me to work on it...