sorry, ... that was halving not "halfing "
I used Kaspersky online scanner to find the infected email(s) ... which were stored in outlook express folders (C:\documents and...
I found and removed the infected emails (by paring thru mail folders until kaspersky identified exact ones) thanks
Thanks ... I had already deleted the hjackthis logs ... so I left those lines out ... and did not notice you used a few (docs & settings) user...
Thanks again ... yes I would like to remove the disabled startup items and the kaspersky log ... KASPERSKY ONLINE SCANNER 7 REPORT...
thanks .... new log file of combofix.txt ..... ComboFix 09-02-02.04 - step... 2009-02-03 8:37:48.2 - NTFSx86 Microsoft Windows XP Home...
on restart the registry keys still seem to be deleted I tried GMERS again and it suddenly restarted my computer while scanning
sorry about the icesword ... I appreciate your time ... my mistake for some reason the save button on GMERS disappears after the scan ... but I...
i have the file c:\windows\system32\drivers\diskdump.sys ark.txt on the way ....
I just tried a program called icesword ... it seemed to be able to delete the BHO and Browser settings values ... they no longer show in regedit...
xwsmovca.sys was created near the time of the infection ... it is also resistant to removal ...
mbam log .... Malwarebytes' Anti-Malware 1.33 Database version: 1707 Windows 5.1.2600 Service Pack 3 1/30/2009 12:14:06 AM...
the combofix file ...... ComboFix 09-01-21.04 -2009-01-29 22:54:49.1 - NTFSx86 Microsoft Windows XP Home Edition...
[Resolved] problem deleting registry keys A few days ago I got a couple of popups in a row ... I found a few suspicious .dll and a ~.exe file...
Separate names with a comma.