VirusBurst help me #1 of 2

I followed all the instructions found on MAJORGEEKS. I think the problem is near an end. Attached are the logs of Bitdefender, PandaActiveScan. In a new thread I will post the GetRunKey, ShowNew and HijackThis logs. #021 in the HijackThis log is a problem. There may be more.

In the (Taskbar?) bar at the bottom of the page I still have a red circle with a red forward slash through it that cycles into a blue question mark and back and forth. Often there is a balloon popping up which if clicked takes me to the VirusBurst web-site and I am offered their product.

I am new to this but that doesn't excuse me for not following directions. I clicked 'show all files scanned' but I deleted all the 'clean files' in the log file after I saved it, so if it looks wierd, that's my fault.

I have a Dell Dimension 8300
Registered Microsoft Windows XP PRO Version 2002 Service Pack 2

Intel Pentium4 CPU 3.00GHz
2.99 GHz, 1.00GB of RAM
Dual Intel Pentium 4 CPU 3.00 GHz processors
Dual Monitors 1 default, 1 DELL W2300LCDTV(Digital)
Dual 128MB DDR ATI Radion 9800 PRO
Wireless-G PCI Adapter with SRX

IE latest version
Microsoft Office 2003
E-MAIL is through OUTLOOK
Norton Internet Security
Norton Antivirus

I do not have Norton Protected files in my Windows Recycle bin anymore. Don't know when it left. Would like to have it back. I did not delete Norton Protected files if there are any as I could not locate them.

Data Execution Prevention (DEP) for essential Windows programs and services is turned on.

 

VirusBurst help me #2 of 2

Attached are the GetRunKey, ShowNew logs and The HijackThis log.

 

coma computer

This AM my computer would do everything but let me go online. Data was sent and recieved but not at my request. I ran HijackThis and deleted a file, C:\WINDOWS\system32\gqagksr.dll, I thought was the culprit and now it works again.

I still can't get rid of the malware I believe this is related to. In my toolbar, there is a red circle with a slash through it that cycles to a blue question mark, back and forth. A balloon will come up that declares "Critical System Error!...". If I click the balloon it will take me to the VirusBurst page and offer their product.

HJT found something and I allowed it to "FIX IT",
O21 - SSODL: hydrodictyon - {b166be07-30a4-4d38-b781-44528a630706} - C:\WINDOWS\system32\gqagksr.dll
I think it's related.

If I go to the toolbar, right click, left click properties, check 'hide inactive icons', left click 'customize', I can 'always hide' the red-blue thing but if I reboot, it's right back again and my connection indicator is 'hidden' like they've traded spaces.

My other threads tell have run the READ AND RUN ME FIRST stuff and have uploaded all the required logs.

 

*%#(%_)!@%&!)#%)_$%_@*!&_%)$*@

[QUOTE]I'm going to post two messages! This is the first! Complete this procedure completely including attaching the requested log before doing the second procedure.[/quote]

*($(_)#_+$Q)*$#*(%*()$%

I can't believe I didn't do that. You, of course, know how I screwed this up. I ran the second proceedure before sending the first rapport.txt file in a post. Then the first file was overwritten by the second proceedure. My fault!

I looked at the first file though, and it noted the now deleted file. There was some more stuff but I didn't get the impression it was critical. (Next time I restart my computer I'll probably blow the transformer down the street).

After looking at the HijackThis.log I see I probably still have issues, (beyond not being able to follow directions).

Anyway, the thing is gone and, chaslang, you are to thank.

If there is a way to get the old file back and it is necessary, you'll have tell me how to do it. But all appears well and fine and I do appreciate your help so very much. We 'dummies' (there are books written for us you know) need you good people to get us out of these jams we get ourselves in. I could go on and on here but without being able to give you a great big man-hug, well, bless you and yours.

Again and again, thank-you.

 

Thanks so much for your patience and expertise. I followed the last details and this system is clean.

I expected to have to do the whole reinstall of my system procedure but you saved me from that.

I had to do it once before and it was easy except the files I saved to disc were encrypted and I don't know why or how so it was a brand new start. It was just the address book from OUTLOOK and there was a lot on it but I got back the ones from people as they sent me email and that cut it down to about a fifth the original size.

I tried the algorithms I found in this system to see if I could read the disc with them applied one by one. No luck.