DaDooDaidy

Thank you very much for your help and the links. I did those steps with the Tea Timer, but it didn't help for some reason. You're right the other problems are Windows related. I had to reinstall Windows XP. The problems I mentioned have gone away. I still have all my files including the applications, but need to reinstall everything to synchronize the computer. This is a great site. I would love to learn more or maybe take a class later.

The computer loads up faster than it used to since I did the virus scans. I still have these things. When I lose the connection dialog without closing the browser, it still seems to work okay. Although yesterday some pages were not showing up and the images disappeared. Then I cleared all private data and it was okay. I'm using Mozilla Firefox. Thanks for telling me about the updates and shutdown message. There are a couple of other messages that I get from SpyBot. Both from Session Manager:Value Deleted. First is BootExecute- old data: autocheck autochk * and the second is ExcludeFromK

Yes, the tab is enabled. When I check the box for 'turn off System Restore on all drives', a confirmation message says all existing restore points will be deleted and I will not be able to track or undo changes to the computer. I clicked Yes and it says it encountered an error trying to enable/disable one or more drives (C and D). Please restart machine and try again. Now the box is unchecked. It looks like I'm unable to check the box to turn if off, reboot, then check the box again. P.S. I'm still getting an option to update system and shutdown when the computer is turned off. Since I don

Yes, I do.

I deleted the two files. I cannot get to System Restore after Programs in the Start Menu, even if I switch it to classic view. I used Windows Explorer and found it here: C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools I get the following message... System Restore is not able to protect your computer. Please restart your computer, and then run System Restore again. I moved the old email from the previous version to put on CD later. Or I might decide to delete that folder. I think I need to continue saving what I need to from the current folder and delete the re

When I did the ATF cleaner, there was no option for FireFox or Opera. I'm using FireFox and I have no passwords stored anyway. It still seemed to work, because it cleaned 30,691 MBs. Then I did the Kaspersky scan. Is it getting better? I don't know most of those email addresses. It was from a list server group. Someone went on vacation once and the auto reply message probably kept sending out a virus. Yikes! Kaspersky results... ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Friday, November 16, 2007 7:35:12 AM Operat

When I shut down the computer last night, I got a strange option to update and shutdown. I know I didn't do anything new, so I changed it to shutdown only. I also unplugged the modem wire since it's not working right now. I am attaching a zip file of the Gmer text to this post. gmer_text.zip

The file is too big too post all of it at once. I just tried posting a portion of it here and it didn't show up. Can I attach the file here or email it to you? I have to sign off tonight, but I will check back in the morning.

I saved gmer.zip and then extracted gmer.exe to the desktop with WinZip. It won't stay open long enough to do anything else. Update! I right clicked it and did Open As. Now it's open.

The computer is running okay, but is not totally normal. There is no list after All Programs in the start menu, there is no recycle bin and the modem is not functioning. If I type an incorrect url in the Mozilla Firefox browser, it will seem to hang with a connection dialog and then nothing works until the browser is closed and started again. When I print a document, I get a Windows Installer dialog that I have to cancel and close, but it still prints. The ComboFix did not restart the computer this time, so I hope it means we're making progress. ComboFix.txt ComboFix 07-11-08.1 - Toomay Tec

It has finished. Here are the results. Activescan.txt Incident Status Location Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Toomay Technologies\Application Data\Mozill

I thought Panda had stopped, because it got stuck on that darn mail folder. It's probably not a good idea to save mail between upgrades. However, it's been very useful to go back and review on some things. I hate to lose all of it. It's still going at about 50%. So far it has cleaned and disinfected 29 viruses (it was 27 right before this post). It has detected 33 spywares and 5 hacking tools and rootkits. Yikes! That doesn't sound good. I know this version of Panda will only disinfect viruses, so what do I do now? Is it time to reformat the hard drive? I'll let the scan continue unt

No, I'm not sharing FWD emails. Most of it's from a backup mail folder, a previous version of Netscape Mail and an old email list group. Norton was catching most of it. Panda ActiveScan is started with IE again. It's currently at about 50%. Results will be posted tomorrow morning.

Here are the results. ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Monday, November 12, 2007 7:25:12 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 11/11/2007 Kaspersky Anti-Virus database records: 456467 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Sca

It's almost about 50% done, so it looks like I will be posting the results in the morning.

The Kaspersky Online Scanner has stopped. I don't normally use IE, but had to open it, because Mozilla Firefox wouldn't get past the Accept button. I'm not sure what to do, because I do have administrative rights on this computer. The IE version is 6. I think the settings were set to Medium, but I reset them anyway. I verified I'm a computer administrator under user accounts. UPDATE! I got it to work. I clicked on the message at the top. It started and I clicked Next. Got a Windows Installer thing again, but closed it. It's currently updating the Kaspersky AV databases... Started scanni

Save this as CFScript.txt Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below. This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log. Then Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings

I just saved all lines in the quote box to that file. I will post results when it finishes.

I'm still waiting here. What do you think, MoNsTeReNeRgY22? Is it something you can help me fix this morning (I'm in CA)?

Computer restarted itself in the middle, but it finished. Here are the results. ComboFix.txt ComboFix 07-11-08.1 - Toomay Technologies 2007-11-10 12:27:55.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.622 [GMT -8:00] Running from: C:\Documents and Settings\Toomay Technologies\Desktop\ComboFix.exe . Unable to gain System Privileges ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\ddaby.dll C:\WINDOWS\system32\pmkhg.dll . ---- Previous Run ------- . C:\Documents and Settings\Toomay Te

Here are the files. I also have a hijackthis.log file and a hijackthis dialog window open. What do I do next? main.txt Deckard's System Scanner v20071014.68 Run by Toomay Technologies on 2007-11-10 11:35:41 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Failed to create restore point; System Restore is disabled (service is not running). -- Last 5 Restore Point(s) -- 36: 2007-11-07 15:04:51 UTC - RP1076 - Software Distribution Service 3.0 35: 2007-11-0

Thank you for that link, which looks very helpful. Unfortunately, I can't get to either option, so I can't do it. I must backup and reinstall Windows. Why me?!

No, I'm afraid that didn't work. I keep getting a Windows Installer thing periodically. I am unable to use the modem.

UPDATE! I got some other instructions from the downloads I did yesterday. That file that couldn't be deleted is gone. Thanks for your help on that. I used RemoveIT Pro v4 with Unlocker Assistant to get rid of ddaby.dll and SpyBot blocked it from getting added to the registry. I have a slightly different problem now that I hope you can help me with. I may have reversed some changes with SpyBot that I didn't mean to do. My Programs list in the start menu is gone, but programs still work. I may have lost iTunes. Please let me know what I can do to help restore some of the stuff.

I seem to be stuck on Step 1. ComboFix.exe appears to be running fine. Two DOS windows are open that are blank for about 10 minutes. The first window says C:\WINDOWS\SYSTEM32.EXE in the title bar and the second window is blank. I've done this twice and the same thing happened. I did Step 2 after the first attempt, but no log file was produced and HijinxThis closed. I did not click in combofix's window. Am I just support to wait? Because all my desktop icons have disappeared when the two blank dos windows appear. Help.