I'd appreciate any help with this on going problem.

Hopefully I've attached the right files, please bear with me.
Thanks.

Attached Files

	hijackthis.log (9.4 KB, 2 views)
	ComboFix.txt (23.9 KB, 2 views)
	Report-Scan-20071026-010654.txt (1.5 KB, 2 views)

[B]Hello and welcome to Techspot.[/B]

It would`ve been nice, if you`d told me what the problem was. Also, you have not posted the results of the Panda Antirootkit scan.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

[b]Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT).[/b] See how [URL="http://www.bleepingcomputer.com/forums/tutorial61.html"]HERE[/URL].

[b]In Windows Explorer, turn on "Show all files and folders, including hidden and system".[/b] See how [URL="http://www.bleepingcomputer.com/forums/tutorial62.html"]HERE[/URL].

Go to add remove programmes in your control panel and uninstall anything to do with([b]if there[/b]).

twcglwau

Close control panel.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to([b]if there[/b]).

O2 - BHO: (no name) - {561B1A4C-0CE2-B080-9F75-026EF4F903B5} - C:\Program Files\twcglwau\twtoaglc.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: The htunistock - {C58A4487-4C2E-45E4-9E3A-52B3A23CC396} - C:\WINDOWS\htunistock.dll

Click on the fix checked button.

Close HJT.

Locate and delete the following [b]bold[/b] files and/or folders([b]if there[/b]).

C:\WINDOWS\[b]htunistock.dll[/b]
C:\Program Files\[b]twcglwau[/b]

Reboot into normal mode and rehide your protected OS files.

Post a fresh HJT log as well as the Panda Antirootkit results.

Let me know if you`re still having problems and what exactly they are.

Regards Howard

[color=red][b]This thread is for the use of[/color] Geo3 [color=red]only. [color=blue]Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our[/color] [URL="http://www.techspot.com/vb/menu28.html"]security and the web forum[/URL].[/color][/b]

Thanks Howard for your prompt reply. I'll let you know how things go.

Howard,
Thanks again for you help I think all is well now. Panada Anti-rootkit identified no problems. NJK log attached.

Attached Files

hijackthis.log (9.4 KB, 2 views)

Your HJT log is clean.

[b]Turn off system restore.(XP/ME only)[/b] See how [URL="http://www.bleepingcomputer.com/forums/tutorial56.html"]HERE[/URL].

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.


If you have any further virus/spyware problems, please post in this thread.

Regards Howard

[color=red][b]This thread is for the use of[/color] Geo3 [color=red]only. [color=blue]Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our[/color] [URL="http://www.techspot.com/vb/menu28.html"]security and the web forum[/URL].[/color][/b]