Backdoor Trojan Challenge

I am removing the links you gave as they may lead to someone clicking and becoming infected.

In the meantime, we also need the log from running MGTools.exe ---> C:\MGLogs.zip

 

I am not seeing any malware.....if you suspect a problem with an email, you need to delete those emails.

You can run an online scan form Bitdefender if you like: go to Bitscan link: agree to the license and then select Scan. DO NOT CHANGE THE OPTIONS TO SHOW ALL FILES SCANNED. That will make your logs huge and we don't need to see clean files. Once Bitdefender completes the scan:

Click-on the Detected Problems tab. Then select Click here to export the scan report

When the window comes up to save the report, change the Save as type: box to Text (Tab Delimited) (*.txt) and then in the File name box enter change to bdscan then click save. This will save a file named bdscan.txt in whatever folder you are currently in when you save the file (take notice of where you are at so you can find it later). This bdcan.txt file will actually contain HTML code that we can easily view later while reviewing your log. All we have to do is rename the file to bdscan.html.

 

Are you downloading your hotmail messages into Outlook? What have you done to clean out those accounts? Did you use a different computer and change your passwords? Have you removed all emails that hold attachments?

Please try running Kaspersky Cleaner.

 

I tend to doubt that any scanners are going to find anything. You may have installed a program that is hooking itself into Outlook some how.

Did you install StopZilla after this problem began? Is it paid version or a trial version. If just a trial, uninstall it now.

The below were recently installed. Were they installed before or after the problem began:

I notice the 2nd is related to Outlook?? I assume the below two recent DLL files are related to the above programs:

Code:

2008-11-13 13:44 . 2006-04-17 11:56 1,207,808 c:\windows\System32\PhoenixDll.dll
2008-11-13 13:44 . 2004-10-16 21:46 178,176 c:\windows\System32\StellarProfile.dll 

What are the below files on your Desktop from?

Code:

"C:\Users\Martin\Desktop\"
mail.gif      13 Nov 2008       90700  "mail.gif"
mail.psd      13 Nov 2008      463046  "mail.psd"
pst-re~1.exe  13 Nov 2008     2705766  "pst-repair-t.exe"

Do you know what the below is for? It's a bad idea to install programs like this and like you did with SUPERAntiSpyware. You should install things into their default folder names.

Have you tried using System Restore to go back to a point in time before the infection? If not, it may be worth a try. Note anything installed after the date you restore to will no longer be installed (like Comodo).

Note you only posted your last logs from SUPERAntiSpyware and Malwarebytes but you have other scans you ran with them that found problems. Please attach the below logs

Code:

"C:\Users\Martin\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\"
supera~1.log  17 Nov 2008  7460  "SUPERAntiSpyware Scan Log - 11-17-2008 - 12-58-21.log"
supera~2.log  19 Nov 2008  2806  "SUPERAntiSpyware Scan Log - 11-19-2008 - 10-40-45.log"
 
"C:\Users\Martin\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\"
mbam-l~1.txt  17 Nov 2008  1724  "mbam-log-2008-11-17 (15-48-50).txt"

 

You're welcome. You should work thru the below on your newly installed system:

How to Protect yourself from malware!