Hello, I seem to be having some issues lately, there appears to be a few differing infections, I'll try to describe as much as I can. First, there seems to be a problem whenever I try to click a link in Google: the link usully redirects me to some ad or 3rd party site. I use Opera but also have IE as a backup(in case sometingfs wrong with Opera), I tried using Google on both browsers and the same thing happens so it must be a deeper infection. I went to different support sites, but there doesn't appear to be any general help for this.
The other issue is that when I browse the internet, sometimes 2 or 3 tabs pop up with incomprehensible urls(for example;
http://njä\02x¹QÃt¸ô? or
http://U-`X¬`\14F&\186Ì or http://\01òO¢/ºzDt=zLâØy£D\17¤ôúpî·éÅ\19\0F\14h/¸y\1FRoo<*\18uå·\7F}/) I'm lost at to what's behind this problem.
And finally, the last issue was that recently I may have downloaded a bad .exe program, this may have caused my csrss.exe file to become corrupted, my nod32 antivirus scanned it and quarantined it from the c:\windows\config dir, but there's also another csrss.exe in my c:\windows\system32 dir. I ran a system scanner which said that the csrss.exe in the system32 folder is not the microsoft file, but I don't want to delete it because it might affect the system. At about the same time that the csrss.exe file became infected, a stange pop up started coming up saying http ://212.117.174.14/PC_protectvam.exe, nod32 always terminated it, and after I followed the steps in your guide before writing this post(using the various scanners), the http ://212.117.174.14/PC_protectvam.exe popup stopped.
I'm very lost as to how to remove these infections(if that's what they are) and hope that someone here can help me.
My browser is Opera(IE as a backup), using Windows XP Pro(Ver 2002) SP2, Intel Pentium 4, 2.4 GHz 3.37GB Ram
Here are my logs in order of sas>mbam>hjt
[Moderated Message: Links De-linked for safety][attachment deleted by admin]