What has infected my .exe files..???

[ALL THUMBS]

hijackthis log file from ALL Thumbs.txt

Kaspersky Scan of ALL Thumbs PC.txt

Report-Scan-20080122-002139 of ALL Thumbs.txt

Thank you for your guidence in trying to repair my computer, it has been somewhat helpful.

I have followed your steps to the letter and have found that my programs that started up before still havent started up after the clean up.

I have also downloaded phillie's suggestion and produce a log file, however it only shows three line items as mentioned below.

Ran on Tue 01/22/2008 -  1:25:14.31

I did download the Vundo removal tool and ran it, perhaps thats why it only shows what is mentioned above.

AFT done its job by removing all temp files.

Spybot, while in safemode it had a problem, when it came to fixing the problems, it showed that it was not responding during the process of fixing it.

Before i posted this thread, AVG Antivirus detected 12-15 exe's files that i knew where safe exe's but it still put them into to vault, from there I had action AVG to delete these, should i have done this action. If not, do i need to reinstall the programs that where listed?

From time to time, a popup shows, mentioning do i want to try to reconnect to the internet. Click on Try Again to reconnect. I am assuming that its still in here some where.

I hope that I have given enough info to help you, to help me.


Regards
Vince

[PhilliePhan]

Hi Vince,
It looks like Judy will be away for the week, so I'll try to keep an eye on your thread as best I can

I have followed your steps to the letter and have found that my programs that started up before still havent started up after the clean up.
I have also downloaded phillie's suggestion and produce a log file, however it only shows three line items as mentioned below.

Looks like some of the infected .exes were removed and therefore not detected by RenV. Can you tell me what they were?

I did download the Vundo removal tool and ran it, perhaps thats why it only shows what is mentioned above.

Which Vundo tool? Atribune's VundoFix? I still see Vundo in the HJT Log...

Spybot, while in safemode it had a problem, when it came to fixing the problems, it showed that it was not responding during the process of fixing it.

Actually, I'd like you to disable the "Tea Timer" as it just gets in the way of fixes. Or, just disable Spybot for the time being.

Before i posted this thread, AVG Antivirus detected 12-15 exe's files that i knew where safe exe's but it still put them into to vault, from there I had action AVG to delete these, should i have done this action. If not, do i need to reinstall the programs that where listed?

Do you still have the log from AVG AV when those deletions were made? I'd like to see it.
-- You'll need to reinstall any damaged programs. Might be best to wait until After we finish, though


Let's go ahead and do this:

-- Look in Add/Remove programs and remove any old Java versions and then reinstall latest version.
http://www.java.com/en/

• Download combofix.exe by sUBs to the infested computer's Desktop.
  
• Alternate Download
  
• (If you already have a previous version, delete it and download a new version).
• Double click combofix.exe & follow the prompts.
  Note: Combofix will automatically disconnect your Internet connection when it runs, do not reconnect it.

When it finishes, it ought to

• Produce a log for you. ( C:\Combofix.txt)
• Restore your Internet connection.

IMPORTANT:

• Do not use your computer while Combofix is running.
• Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  If you've lost your Internet connection when Combofix has completely finished, re-start your computer to restore it.

Please post the log for me and we'll go from there.

I will try to check back as time permits - I don't work with malware too often these days due to other commitments.

Cheers
PP