please advise which version OF avg are you using ? is your computer fully updated with all its security patches plus sp1 and 2?
please take a system restore point NOW;
XP system restore tutorial instructions here ; http://www.bleepingcomputer.com/tutorials/windows-xp-system-restore-guide/
please try running these two scans Superantispyware; guide on how to install and run
If you have not already got a Downloads folder , I suggest you create a new folder in My Documents, and name it Downloads ; Installing superantispyware
Superantispyware is found here http://www.superantispyware.com/index.html
Download to the Downloads folder the free exe to superantispyware from herehttp://www.superantispyware.com/downloadfi...ANTISPYWAREFREE
you install superantispyware by clicking on the icon in the downloads folder ;
it will launch the installation process;
follow the instructions and I suggest you ask for a default installation ;
ensure it creates a desktop icon for you ;
once the program has been installed it should ask you if you wish to update the program ; say YES
if it does not ask you , you need TO fully update the definitions by opening the program and find the ‘check for updates ‘tab in the bottom left of the menus you see; click on it and it will do the update for you ;
I suggest you ask it to check for updates again once the first update is complete just to be sure
please then reboot your computer ; it is preferable to run the scan in your computers safe mode;
please open this program from the desktop icon
please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs
go to the preferences tab on the right
on the General tab I suggest you disable the scan on start up
on the Hijack protection tab I suggest you tick BOTH items; this enables the program to give you a Hijack home page alert if your home page gets changes ; if you DO get a home page hijack, when you boot up the computer superantispyware will open and tell you the home page has changed and will ask you if this is a legitimate change;
in statistics/logs- go to the bottom and you will see two boxes asking about keeping a log of scanning results and saving empty logs?
Tick both of them
Then go back to the main screen and see the tab that says scan your computer? Do you see that ?
Click on it
A screen will open ;on the left hand side ensure your FIXED drive ( most probably the C drive) is ticked;
Also tick in there any other section that is used and attached .
On the right had side you see three scanning options?; please click the Complete scan option
OK; you are now set to scan
Please then click on the ‘next’ tab and let the scan run please run the scan while you are OFF line and do not have the computer doing any other work while the scan runs
From my experience running this program the complete full scan CAN take many hours to run depending on how much is on your computer so be patient and let it run; maybe go for a cuppa or watch a favourite program while this one runs
Once the scan IS complete you will be presented with a box telling you what the scan has found ( if anything); if harmful objects have been found click on the OK button ; on the next screen all the harmful objects should have a check mark beside them, ; click ‘next’
A notification should appear that
‘quarantine and removal is complete’
and then the Finish button to get returned to the main menu
If you have run the scan in computers safe mode you will need to reboot to computer normal mode
If you have run in computer’s normal mode I suggest you reboot to enable the ‘fix’ the program has performed to consolidate
You then need to retrieve the scan result
Open the program and return to the statistics /logs section ; locate the most recent log ; left mouse click on it to highlight it and click the ‘view log’ tab
The log should appear in maybe note pad ; you need to copy and paste that log for examination
Once you have posted the log please close the superantispyware program
and malawarebytes; instructions quoted from http://www.bleepingcomputer.com/forums/ind...l=malawarebytesMod Boopme
Please download Malwarebytes Anti-Malware
http://www.besttechie.net/tools/mbam-setup.exe and save it to your desktop. Do Run from normal mode.
alternate download link 1 http://malwarebytes.gt500.org/mbam-setup.exe
alternate download link 2 http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.html
Make sure you are connected to the Internet.
Double-click on Download_mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
Make sure the "Perform Quick Acan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
please let us know the results from those scans?