Hi

I had windows antivirus 2009 on my computer.
I have follwed the 6 steps outlined out in -
'Read this before requesting malware removal help' topic.

I have attached the three logs onto my post.

I would be grateful for some advice on what to do next.

Just let me know if you need to know anything else about my computer.

Thankyou.

[Saving space - attachment deleted by admin]ADDITIONAL useful information:

Operating SYSTEM:  Windows XP
Computer: Fujitsu Siemens
Service Pack 2

Currently using my computer in safe mode with networking.Download ComboFix and save it to your desktop.  RUN the program and read its disclaimer (it's FAIRLY short) and make sure you really pay attention to what it says.  Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt.  Go ahead and post that here, along with a fresh new HijackThis log.  Note: Don't click on the window while it's running; this may cause stalls.Hi,
Here are my logs for combofix and a new hijackthis.



[Saving space - attachment deleted by admin]Okay, it's looking a little better, but there are still a couple of things we need to try...

Please Download ATF-Cleaner.exe by Atribune (Windows XP, 2K, 2003 & Vista ONLY)

• You can put ATF-Cleaner on your Desktop for easy access.
RUN ATF-Cleaner.exe.

-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK

If you use Firefox browser, do this also:

* Click Firefox at the top and choose Select All from the list.
* Click the Empty Selected button.
* NOTE : If you would like to keep your saved passwords, click No at the prompt.



Then...Run the ESET Online Scanner and ATTACH the ScanLog with your post.

* You will need to use Internet Explorer to to complete this scan.
* You will need to temporarily Disable your current Anti-virus program.
* Be sure the option to Scan unwanted applications is checked.
* When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log along with a new HijackThis log.