I need help, but not sure what the problem is!!

Definitely a start! Good going.

After you get cleaned up with HJT & whatever else may be needed, maybe we can all figure out what went wrong & help you get the needed protection for your system. I don't suspect you want to go through this kid of mess again.

 

It's good to see a real-life example of where Ewido can help where regular scanners can't It pulled out some pretty nasty ones, too.

 

What should I do next?

 

Have u posted a HijackThis log yet at one of the forums Corrine suggested?

That would be my next step.



snowbound

 

yes i have

 

Ewido does a great job. It helped me on a massively infected system I was working on a month or so ago.

 

For those wanting to follow....here is the thread at Landzdown.

http://www.landzdown.com/index.php/topic,2421.0.html

Also ilovepizza....the first part of your HighJackThis log is somewhat important to the helpers. It was the part that looks like the below sample info.

Logfile of HijackThis v1.99.1
Scan saved at 4:01:42 PM, on 10/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

When did this all start?
If someone didn't have you turn off , then turn on System Restore, You shoule be able to go back to a time when all was well.

Nother good reason to use a program like Windows Shared Computer toolkit.

controler

 

There's more stuff in his system restore than the rest of the system.

 

That's ok. We can leave SR alone until he's clean. No sense trying to figure out when the infection started since it appears to have been around for a while based on the dates in the temp file. After the system is clean, it would be a good idea to flush SR and create a new restore point. However, if SR were purged now, there would be no point to return to.