out of ideas (trojan or virus) added hjthis log

added hi jack log…

my wife’s laptop has something on it i cannot remove. i am running avast and mbam in safe mode. still it finds nothing. if u type something the cursor automatically backspaces and deletes what u have typed. the touchpad jumps erratically. when u go to search for anything it automatically search the desktop. i thought i had it fixed and the nest day it was back. system restore problem?? im running pro on my pc and free on hers. ran cc cleaner this morning still no help…I am getting redirected everywhere i go. the keyboard gets changed do other mysterious things beside type. if i try to explore “my computer” it redirects to the desktop. i can go to safemode with networking and everything works great. i have tried panda online scan but it says that i have avast already on my laptop and ends the scan…

windows xp home edition service pack 3

i have another pc here that i can use to troubleshoot this problem does anyone have any advice?

did you try disabling the touch pad and use a mouse instead (disabling the touch pad matters for this…) ? and see if you got the same results with a mouse…

yes i have to use a different mouse but i still get redirected to my homepage. whenever i type something it automatically backspaces and deletes what i have typed…

yes OK but is the touch pad disabled or not ?

i am running avast and mbam in safe mode.
MBAM is designed to be run and works best in Normal mode

the touchpad is disabled and i have ran mbam in normal and safe mode…

looks like a hardware issue to me…

a hardware issue that redirects me back to my homepage when i try to surf?

so that’s something else OK ;D did you check the content of your hosts file?

i really dont know how to do that sorry.

C:/Windows/System32/drivers/etc/hosts… see the content when opening it with notepad, ie check if there are any abnormal redirections, ie lines with no “#” in the beginning…

can i do this in safe mode with networking? because everytime i try to do anything it redirects me to the desktop. ie if i explore my computer. it redirects my to the desktop.

yes this can be done in safe mode, on a second thought it seems your system is infected… I know what I would do, ie reinstall the OS, but you may prefer to wait until you find a way to clean your system, it’s up to you… some people here could help you with that, using malware tools and they would guide you. Just please change the title of your thread to something more explicit like mentioning a possible virus/trojan infection…

Try a quick online scan with HitmanPro, should only take 5-10 mins. See if it finds anything http://www.surfright.nl/en/hitmanpro

You need to install the program first.I imagine you can do this in safe mode

can i do this in safe mode?

I would install the program in safe mode with networking.I can’t see why not

The program needs to be activated ( 30 day trial) to remove anything

32 or 64 bit? avast is still on pc it has not been uninstalled…

Hi there, lets try an analysis first to see what is present

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop

[*]Close ALL OTHER PROGRAMS.
[*]Double-click on OTS.exe to start the program.
[*]Check the box that says Scan All Users
[*]Under Additional Scans check the following:
[*]Reg - Shell Spawning
[*]File - Lop Check
[*]File - Purity Scan
[*]Evnt - EvtViewer (last 10)
[*]Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32*.dll /lockedfiles
%systemroot%\Tasks*.job /lockedfiles

[*]Now click the Run Scan button on the toolbar.
[*]Let it run unhindered until it finishes.
[*]When the scan is complete Notepad will open with the report file loaded in it.
[*]Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please attach the log in your next post. By selecting additional options and then browsing to and selecting the OTS.txt

ok scanning right now…

here ya go