BleepingComputer.com: IE script errors, audio in background & hijacked browser

Hi, I'm hoping someone can help me with this problem as I simply can't get rid of it!

My laptop (running on windows XP) was recently infected with the Windows Security Center virus. I used Revo uninstaller to locate the virus file and then used the malwarebytes anti-malware file assassin tool to delete the file in safe mode. This seems to have worked and I no longer have the pop ups and the system tray shield so I think that's been fixed. However, now I am getting constant pop ups for IE script errors, am hearing music and adverts playing even when not connected to the internet and my browser appears to be hijacked as when I do a search I am taken to some completely different search results.

I had AVG anti-virus free on the laptop however for some reason I never noticed it wasn't actually working properly for some time! I uninstalled this and instead downloaded Avira antivirus where I found somewhere in the region of 950 viral files ! I then have run malwarebytes antimalware but neither of these programs seem to be picking up this particular problem. I have tried to install ad-aware but whatever is on here is blocking this from running.

The windows security virus has already managed to completely wipe my C drive (I got the blue screen and an error message in white which I didn't manage to write down) and I have lost all my music, pics and documents so whether this will make removing the offending virus easier I don't know.

I'd really appreciate any help or advice anyone can give me as this is driving me insane! I'm not too sure what to install or what logs to add to this question so hopefully someone can advise. Thanks in advance!


(An addition - a member on here has just messaged me & pointed out that my files are probably just hidden so I have now found all the pics etc again so my C drive hasn't been wiped)

This post has been edited by shionatron: 04 May 2011 - 05:39 PM
Reason for edit: Moved to AII from XP. ~ OB

im having the SAME problem hopefully someone has an answer

As you may hav removed and not cleaned an important file and thus you have further errors I feel it is best to move you to our MRK section so we don't lose the computer doing futher scans. You probably still have a Master Boot Record infection.

We need a deeper look. Please go here....
Preparation Guide .

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Let me know if that went well.

I've done as you suggested - completed the prep guide steps & posted to the new forum.

Thanks for your help.

Thank you..
Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRL Team member is already assisting you and not open the thread to respond.

To avoid confusion, I am closing this topic.