Unknown infection

This is on Windows XP Pro x32 with all service packs and updates.

A couple of weeks ago Avira claimed to remove some malware, then IE started complaining about a proxy not working. Laptop was already acting unstable and having to be power cycled multiple times per day to keep working. Checked internet options and proxy was set to local loopback, removed that and IE started working again but now I could not work more than a couple of hours without getting the error message "not enough quota is available to process this command".

I did a registry cleanup with Norton and that allowed me to work 8 hours at a time before I start getting the same message. Googled the message and found reference to virt mem, looked at that and it was manually set so I changed it back to system managed size.

It is now working much better but I still think it is infected. Avira isn't finding anything though.

Error Message: Not enough quota is available to process this command is not uncommon and you may need to increase the size of the paging file.

In some cases you may need to increase the amount of disk space available to offline files.

• How to Manage the Offline Files Disk Space Usage in Windows 7
• Manage disk space for offline files in Windows 7
• Manage disk space for offline files in Vista
• Using offline files in XP

If you want to check further for possible malware do this.

Please download Malwarebytes Anti-Malware and follow these instructions for doing a Quick Scan in normal mode.

• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply and exit MBAM.

-- If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.


Please download SUPERAntiSpyware Free and follow these instructions for performing a scan.

• Double-click SUPERAntiSypware.exe and use the default settings for installation.
• To retrieve the removal information after reboot, launch SUPERAntispyware again.
  • Click Preferences, then click the Statistics/Logs tab.
  • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
  • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
  • Please copy and paste the Scan Log results in your next reply.
• Click Close to exit the program.

-- If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner (listed under Popular Links) instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.

Edited by quietman7, 29 November 2010 - 09:08 PM.