Hi everybody.
I downloaded a file .avi (sex matter) and since then the computer doesn't work properly. Every time I try to delete the file (that I also can't open) the computer freezes, saying the file is already in use. I can't even check the .avi file properties whithout causing the computer to freeze.
I have run many antivirus/scan programs, everytime with new malware, that everytime seems to be deleted.
I can't use any online scan, as the procedure always shows an error or simply stops.

I have followed the steps you advise to, from 1 to 5, except for the online panda scan, as it is impossible to run (I have lowered the protection to allow the activeX).
That is, after updating each:
-run atf cleaner
-create new system restore point
-run ad-aware
-run avg
-NOT run panda online scan
-checked for windows SP1a
-reboot
-hjt

I have also used spy-bot, escan and disk cleaner, before your steps.

I would really appreciate your help, as I admit I don't know what to do next.
Thanks in advance.

Here is my log:


Logfile of HijackThis v1.99.1
Scan saved at 15.07.20, on 01/11/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\AntiVir PersonalEdition Classic\sched.exe
C:\Programmi\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\atievxx.exe
C:\download\AVG Anti-Spyware 7.5\guard.exe
C:\download\eScan\TRAYSSER.EXE
C:\download\eScan\avpm.exe
C:\Programmi\File comuni\MicroWorld\Agent\MWASER.EXE
C:\Programmi\File comuni\MicroWorld\Agent\MWAgent.exe
C:\Programmi\Acer\Powerkey\Powerkey.exe
C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programmi\Ahead\InCD\InCD.exe
C:\download\eScan\TRAYICOS.EXE
C:\download\eScan\AVPMWrap.EXE
C:\download\AVG Anti-Spyware 7.5\avgas.exe
C:\Programmi\Messenger\msmsgs.exe
C:\download\eScan\AvpM.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programmi\Internet Explorer\Iexplore.exe
C:\WINDOWS\Explorer.EXE
C:\download\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O1 - Hosts: 192.9.200.200 lanificio
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AcerPowerkey] "C:\Programmi\Acer\Powerkey\Powerkey.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\download\eScan\LAUNCH.EXE"
O4 - HKLM\..\Run: [eScan Updater] C:\download\eScan\TRAYICOS.EXE /App
O4 - HKLM\..\Run: [eScan Monitor] C:\download\eScan\AVPMWrap.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\download\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - Global Startup: EPSON Controllo in background.lnk = C:\ESM2\STMS.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6814A9EF-FBF1-46B2-A46E-56B401079C26} - http://212.39.24.3/cab/xu101.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1162386724111
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O21 - SSODL: TapiSrv - {F3EB075D-B99B-5EE0-995C-A06C81361E5F} - C:\WINDOWS\help\newfeat4.hlp
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programmi\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\download\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\download\eScan\TRAYSSER.EXE
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Programmi\Ahead\InCD\InCDsrv.exe
O23 - Service: eScan Monitor Service (KAVMonitorService) - Kaspersky Labs. - C:\download\eScan\avpm.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programmi\File comuni\MicroWorld\Agent\MWASER.EXE

Hello beppe:

Sorry for the wait, if you are still requiring help I am ready to assist.

We can definitely help you, but first you need to help us. The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here: http://www.microsoft.com/windowsxp/downloa...p1/default.mspx
Apply the update, reboot, and post a fresh Hijack This log.

Regards,


Middie042

Hi Middie042,
I am very happy to hear from you!!
Yes, I still need help.

And actually I am starting to be really worried, because I seem not to be able to download SP1: I followed the link you gave me, but Microsoft says that I can't download as my copy of windows is not original (which is true, a friend lent me his disks). However it is very odd because I have downloaded many other updates so far.
Before checking my computer for the updates I might need, Microsoft asked me to download some update referred to the update process itself. May be I downloaded some new licence control tool, I don't know. Gosh!
Is there anything I can do?
I hope you can do miracles...

Thanks
Beppe

Hello Beppe,




While we understand that you may not have been aware, your copy of Windows is not legitimate. Unfortunately, we are unable to help you any further on this site, as we have a strict policy we adhere to in only helping people who have legitmate copies of Windows. Thank you for understanding.


Regards,


Middie042

I understand, and thank you all the same.

Bye,

Beppe