Think i have virus troubles.... :(

[fireballs]

these are my log files.

[Saving space - attachment deleted by admin]

[fireballs]

*cough* bump *cough*... is there anything wrong with my comp?

FB

[evilfantasy]

Bumping your post to the top of the forum actually puts you at the end of the list...

Open HijackThis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

- R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://owa.ncl.ac.uk/CookieAuth.dll?GetLogon?curl=Z2F&reason=0&formdir=2

Important: Close all windows except for HijackThis and then click Fix checked.

Exit HijackThis.

----------

Run this online scan.

This scanner requires Internet Explorer

Use the ESET Nod32 Online Scanner

1. Check the box next to YES, I accept the Terms of Use.
2. Click Start
3. When asked, allow the activex control to install
4. Click Start
5. Make sure that the option Remove found threats and the option Scan unwanted applications is check marked.
6. Click Scan
7. Wait for the scan to finish
8. Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
9. Add the C:\Program Files\EsetOnlineScanner\log.txt log into your next reply.

[fireballs]

ran the scan but i don't think it found anything. Also the start page i put there myself should i still remove it?

i think i have another symptom, i have two startup applications, winamp and launchy, both are working and show up in processes but not in applications, and neither work as they used to.

FB

[Saving space - attachment deleted by admin]

[evilfantasy]

Also the start page i put there myself should i still remove it?

If you want it there then it's OK.

Uninstall and then reinstall anything that isn't working correctly.

No malware.

[fireballs]

i found ism.exe which when i googled it says it's dangerous and i should get rid of it. Should i? is so how?

FB

[evilfantasy]

Where was it found?

[fireballs]

i was looking through the processes on task manager.

FB

[evilfantasy]

Look in add/remove programs for InternetSpeedMonitor and unisnstall it.

[fireballs]

i couldn't find internetspeedmonitor in the add/remove programs, i don't see anything unusual except "scansoft omnipage SE4" which seems to be genuine software just don't remember putting it on. probably came with some printer drivers.

It's not a massive problem as i'm going to format the HDD soon.

FB