Lemme explain my issue:
Sunday night I was searching images(not porn) using google, then I visited a certain website. (Which I can't recall nor can find it again, because in dispair I deleted all browsers data.)
What happaned was the following, upon visiting that page for a full view of it, a new window opened and what appeared to be a fake scan to some drivers had begun, I knew it was fake because that weren't my drivers, so I closed the window, then afterwards Firefox prompted me to accept or not to execute a .exe file, I pressed cancel but I think it was too late. Then my computer become slow as hell and I couldn't even move files on the desktop, I mean dragging them from a place to another, I rebooted my computer and things began to work smoother again. But before that reboot I downloaded BitDefender and installed, in order to do that I had to uninstall my crappy Windows Defender, okay, so everything installed, made a full in-depth scan of all my drivers, found some issues, but the problem persists.
I haven't explained the problem yet, so it is: Most pages take forever to load, some don't even load at all, and I did notice that there is something very wrong with my connection, because I have OutPost Firewall here and I can see which connections are open and to where they are connected, so I notice that all connections were trying to communicate with a group of IPs alike, I think whatever infected my machine has forced it to try and connect anything using a remote proxy, even for DNS I think, things are really weird! I took a screenshot from my Firewall view and it shows one of the many IPs that my browses and games want to communicate whenever I open them. I tried ipconfig /flushdns === Disabled WINS proxy on the registry === today I ran ComboFix. I brought the log here in a Pen Driver, if you guys need it...
The addresses end with 1e100.net and static.host.gvt.net.br. Sometimes a certain 65.xx.xx.xx also appears. I made a previous search about those xy-in-f102.1e100 and they appear to be DNS providers domains, I don't know what else to do, I found this page by searching for ComboFix.
So here's the screenshot from my Firewall:
Edited by Budapest, 30 March 2010 - 06:36 PM.
Moved from Virus, Trojan, Spyware, and Malware Removal Logs ~BP