Install

[evilfantasy]

Go to C:\Program Files and look for the Avast folder. See if the quarantine folder is there and right click the files to see if there is a restore option.

[Ivy]

There's just a temp folder of avast which is empty.

[Ivy]

Its very very late at night now, I have to go to college tomorrow, actually practically its already tomorrow right now!!

Hey Evil, thankyou so much for helping!!!

I was wrong about you in many aspects, sorry!!

I'll come tomorrow now.

Hopefully we'll figure this out!!

Thanks again!

[evilfantasy]

See if you can borrow an XP CD that matches your system Xp Home or XP Pro to do a repair install.

[Ivy]

I dont know whom to take a cd from!!

is that the only way out?

[evilfantasy]

I'm running out of ideas.

Create A Bootable/Slipstreamed Windows XP Installation CD http://www.theeldergeek.com/slipstream_01.htm

[Ivy]

Okay, I got a windows xp 2 CD now

[evilfantasy]

Download this guide.

Repair Install XP.pdf

[Ivy]

Thanks Evil, I reformatted my computer yesterday!

Now I can download etc, I'll still download HJT etc and post a log here so you can take a look.

thanks

[Ivy]

New HJT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:32:19 AM, on 9/29/2008
Platform: Windows XP SP2, v.2096 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2096)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
C:\Program Files\Trend Micro\OfficeScan Client\PCCNTMON.EXE
C:\Program Files\Sify Broadband\BBClient.exe
C:\Program Files\Sify Broadband\BBImpSec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKCU\..\Run: [SifyBB] C:\Program Files\Sify Broadband\BBImpSec.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B49B764-A2EE-4C58-ACFC-6B323C5575DA}: NameServer = 202.144.13.50,202.144.66.6
O17 - HKLM\System\CS1\Services\Tcpip\..\{4B49B764-A2EE-4C58-ACFC-6B323C5575DA}: NameServer = 202.144.13.50,202.144.66.6
O17 - HKLM\System\CS2\Services\Tcpip\..\{4B49B764-A2EE-4C58-ACFC-6B323C5575DA}: NameServer = 202.144.13.50,202.144.66.6
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
O23 - Service: OfficeScan NT Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe

--
End of file - 2864 bytes

[evilfantasy]

Everything looks fine now.

[Ivy]

Yes Currently it si, before that it was in west asia, in 48 days it will probably be in russia, I travel with my Group and stay in different places for 3 to 6 months, anyway I'd like you to edit your last post or just remove the place, that would be very nice you know!

[evilfantasy]

Don't be over paranoid. Lots of people know where you are and it is a large country. We wouldn't allow information that could be harmful in any way to anybody to remain in the forums

[Ivy]

Read my profile

thankyou for helping again

[evilfantasy]

Caught it and already was fixing. Sorry.