Adware, continous popups while using IE, and possibly virtumonde

[Bobby123]

thanks for the reply. Is it possible this is affecting the way vista recognises a pc? On my new pc, it's a 'media device'.
Btw, I scanned this computer with another one, symantec corporate 10.1.... would you like the results?

[Bobby123]

got a 'blue screen' (system error, memory dumping) message. combofix removed that file and put it into a compressed 'catchme' folder.

attached file is one I got after the 'blue screen', it's some 'bad image file, concerning the data file removed. I believe someone else had a similar message on these forums.

[Bobby123]

sorry, forgot to add: it appears when an application opens, really annoying at startup.

[Mr_JAk3]

Hello

That error is related to the infection and we'll get rid of it.
Please post the combofix log (C:\Combofix.txt) to here
And yes you can post the Symantec results too

[Bobby123]

sorry, combofix never saved a log.
and the symantec results are just from files quarrantined by avast, I checked. It appears I only have 1 week to troubleshoot it before it's reformated
My new Vista pc is up and I've moved my most important files. Since I can only go on my old pc on the weekend, I really hope you can help.

[Bobby123]

not much chance of re-running combofix, the image errors pop up at least 30 times when I execute the file.

[Bobby123]

Combofix now says it's been uninstalled after i finally managed to get it to run... The app has disappeared from my desktop.

[Mr_JAk3]

Hi

Okay we'll try running ComboFix in safe mode then.

1. Download this file - combofix.exe
2. Restart your computer to the safe mode:

• Restart your computer
• Start tapping the F8 key when the computer restarts.
• When the start menu opens, choose Safe mode
• Press Enter. The computer then begins to start in Safe mode.

3. Double click combofix.exe & follow the prompts.
4. When finished, it shall produce a log for you. Restart the pc to normal mode if it isn't already.
5. Post the file C:\ComboFix.txt to here.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

[Bobby123]

It's probably too late... I have trouble booting into safe mode, it freezes. Thanks for the help but I'll just reformat. I've moved my important files to my new computer and neither sbybot or NIS2007 can detect anything. Thanks again for the time you took to help me.

[Mr_JAk3]

Hi

okay I'll respect your decision.

Here are a few links may help.

Reformatting Windows XP by wng_z3r0
When should I re-format? How should I reinstall?
Windows XP Clean install

Then there are a couple of things you should do immediately after installing Windows and before surfing the net...

• Install an antivirus and firewall (you should download and have those on a CD or USB drive, all ready to be installed).
  
  These are good (free) firewalls:
  - Kerio
  - Sygate
  - Outpost
  
  These are good (free) antiviruses:
  - Antivir
  - Avast
  - AVG
  
• Get all Windows updates installed!

Please ask me if you have any questions

Then here are a few things that you can do in order to make your fresh computer more secure:

• Use ATF Cleaner
  Download and install ATF Cleaner. Clean your temporary files & folders with it regularly.
  
• Use Ad-Aware
  Download and install Ad-Aware. Update it and scan your computer regularly with it.
  
• Use Ewido
  Update it and scan your computer regularly with it.
  
• Use Spybot S&D
  Download and install Spybot S&D. Update it and scan your computer regularly with it.
  
• Install SpywareBlaster
  SpywareBlaster will prevent spyware from being installed.
  
• Install MVPS Hosts file
  This prevents your computer from connecting to harmful sites.
  
• Use Firefox browser
  Firefox is faster, safer and better browser than Internet Explorer.
  
• Keep your systen up-to-date
  Visit Windows Update regularly.
  
• Keep your antivirus and firewall up-to-date
  Scan your computer regularly with your antivirus.
  
• Read this article by TonyKlein
  So how did I get infected in the first place?