Spyware/malware??

I guess the repair of Windows did not solve the problem? ....

http://www.windowsbbs.com/showthread.php?t=55546

Can you run any programs? Can you boot into Safe Mode and if so do you see the desktop as usual?

The details which follow are my standard instructions for initiating a possible spyware/malware investigation. You may need to download the programs on another computer, burn to CD and copy across to the infected computer in Safe Mode if you are unable to access any programs in normal mode....

Please download and install the 30 day trial version of Ewido Anti-Spyware

Run the program either from the Desktop icon if you chose to install one or from Start > Programs. On the main screen select the Update icon followed by the "Update now" link and click on the Start Update button. The update will start and a progress bar will show the updates being installed.

When the update has completed select the Scanner icon at the top of the window and click on the Settings tab.

On the Settings screen click on Recommended actions and then on Quarantine.

Under Reports select Automatically generate report after every scan and deselect Only if threats were found.

Close Ewido Anti-spyware. Do not run a scan just yet.

Boot into Safe Mode and log onto your usual account.

Do not open any other windows or programs while Ewido is scanning as this may interfere with the scanning proccess.

Start Ewido Anti-spyware by double-clicking the icon on your desktop or from Start > Programs and select the Scanner icon at the top of the window followed by the Scan tab and click on Complete System Scan. The scanning process will start and may take some time.

When the scan is complete if any infections were detected you will prompted for an action - select Apply all actions.

Then select the Reports icon at the top of the window and click on the Save report as button in the lower left hand corner of the screen and save it as a text file (be sure to remember where you saved that file, this is important).

Close Ewido and reboot your system back into Normal Mode and post the Ewido scan report here.

Please download HijackThis through Quicklinks in my signature and save it to a folder on your hard drive, say C:\HJT - not to the Desktop or a temporary location. When entries are fixed with HJT a backup is made to the folder from which HJT is run and this must be in a permanent location.

Boot into Safe Mode and log onto your usual account.

Open the folder in which you placed HJT and double click on hijackthis.exe and select Scan and save a log file - this will be saved in the folder from which you ran HJT.

Reboot into Normal mode and post the log here.

Let me know if you are able to achieve this - you may need to copy the log files to another computer to post here.

 

Sorry we were unable to nail the critter causing the problem - thanks for the update.