Hello jryda55123,
Yes, I thought it worth a try. I am of the opinion that we have removed the malware but that you are left with corrupt system files that need to be replaced. Unfortunately we don't know which ones so can't attempt a copy.
You really need that Windows Installation Disk. It has to be exactly the same as the system you have on the machine.
You could try opening a topic in the Windows XP forum and asking them if they know of a solution. My guess is that they will tell you the same i.e. you need the Windows Installation disk. If you do go there, make sure you tell them you have been here first.
By the way this link has some information on how to get rid of those leftover pieces of SpyBot-S&D.
http://www.spybotsd..../uninstall.htmlNowLet's remove the tools we have been using.
Follow these steps to uninstall Combofix and tools used in the removal of malware. This will also clean out and reset your Restore Points.- Click START then RUN
- Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
Step 2- Make sure you have an Internet Connection.
- Double-click OTL.exe to run it. (Vista users, please right click on OTL.exe and select "Run as an Administrator")
- Click on the CleanUp! button
- A list of tool components used in the Cleanup of malware will be downloaded.
- If your Firewall or Real Time protection attempts to block OTL to reach the Internet, please allow the application to do so.
- Click Yes to begin the Cleanup process and remove these components, including this application.
- You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.
MBAM can be uninstalled via control panel add/remove but it may be a useful tool to keep. Erunt can also be uninstalled via the add/remove programs utility, for some though, it may be a useful backup program to hold on to. The SysProt folder can be deleted.
-------------------------------------------------------------------------------------------------------------------
A reminder now: Remember to turn back on any anti-malware programs you may have turned off during the cleaning process.
-------------------------------------------------------------------------------------------------------------------
Now that you are clean here are some things I think are worth having a look at if you don't already know a bout them:---------------------------------------------------------------------------------------------------------------------
Be sure and give the Temp folders a cleaning out now and then. This helps with security and your computer will run more efficiently. I clean mine once a week. For ease of use, you might consider the following free program:
--------------------------------------------------------------------------------------------------------------------
A great way to check that your Microsoft and Java have the latest updates is to go to Software Inspector at Secunia.
I do this weekly. Not only do they tell you which programs need updating but they give you the link to follow.
To bolster your security go to
Secunia.com to ensure essential programs are up to date.
---------------------------------------------------------------------------------------------------------------------
Make Internet Explorer more secure- Click Start > Run
- Type Inetcpl.cpl & click OK
- Click on the Security tab
- Click Reset all zones to default level
- Make sure the Internet Zone is selected & Click Custom level
- In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
- Next Click OK, then Apply button and then OK to exit the Internet Properties page.
* MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
* Consider using an alternate browser. Mozilla's Firefox browser is excellant; it is more secure than Internet Explorer. Firefox is my default browser but I retain Internet Explorer as well so that I can access the very few sites that require it.
Firefox may be downloaded from
Here-----------------------------------------------------------------------------------------------------------------------
Startuplite is a tool to help you stop some programs not needed when you start your computer from loading. They will begin automatically only when needed.
-----------------------------------------------------------------------------------------------------------------------
To help protect your computer in the future here are some free programs you can look at:
To learn more about how to protect yourself while on the internet read this article by Tony Klein:
So how did I get infected in the first place?