I just got done with the dial-a fix . when i ran combofix after it gave me the log i closed it and had no start clock etc.. just background and my mouse it just stayed like that until i just shut off for about 20mins did i mess it up? because i have ran combofix before and don't remeber it doing that.. thank you angeljam

0

Go to start> run> type in combofix /u (note the space after combofix) then press enter (give it a few minutes. This will unistall combofix. Redownlod Combofix follow the instructions in response #3 and try to post its log.

0

ComboFix 08-08-30.03 - Compaq_Owner 2008-08-31 22:36:33.3 - NTFSx86 Running from: C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2008-08-01 to 2008-09-01 ))))))))))))))))))))))))))))))) . 2008-08-31 21:53 . 2008-08-31 21:55 <DIR> d-------- C:\WINDOWS\system32\CatRoot2 2008-08-31 12:38 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-08-31 12:28 . 2008-08-31 12:28 <DIR> d-------- C:\Program Files\Common Files\Java 2008-08-31 11:08 . 2008-08-31 11:30 17,801 --a------ C:\WINDOWS\system32\drivers\AegisP.sys 2008-08-29 09:27 . 2008-08-29 09:27 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-08-29 09:27 . 2008-08-29 09:27 <DIR> d-------- C:\Documents and Settings\Compaq_Owner\Application Data\Malwarebytes 2008-08-29 09:27 . 2008-08-29 09:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-08-29 09:27 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-08-29 09:27 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-08-22 10:53 . 2008-08-31 15:04 <DIR> d--h----- C:\$AVG8.VAULT$ 2008-08-22 10:28 . 2008-08-22 10:28 76,040 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys 2008-08-22 10:28 . 2008-08-22 10:28 12,936 --a------ C:\WINDOWS\system32\drivers\avgrkx86.sys 2008-08-22 10:28 . 2008-08-22 10:28 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll 2008-08-22 10:27 . 2008-08-31 13:55 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg 2008-08-22 10:27 . 2008-08-23 02:02 <DIR> d-------- C:\Documents and Settings\Compaq_Owner\Application Data\AVGTOOLBAR 2008-08-22 10:27 . 2008-08-22 10:27 97,928 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys 2008-08-22 10:26 . 2008-08-22 10:26 <DIR> d-------- C:\Program Files\AVG 2008-08-22 10:26 . 2008-08-22 10:26 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-31 16:38 --------- d-----w C:\Program Files\Java 2008-08-31 15:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-03-22 02:49 0 ----a-w C:\Documents and Settings\Compaq_Owner\Application Data\wklnhst.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 08:00 15360] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-27 21:52 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04 52736] "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-08-21 01:55 155648] "KBD"="C:\HP\KBD\KBD.exe" [2003-02-11 23:02 61440] "UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 11:01 110592] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2004-10-21 07:15 180269] "Recguard"="C:\WINDOWS\SMINST\RECGUARD.exe" [2004-04-14 23:43 233472] "PS2"="C:\WINDOWS\system32\ps2.exe" [2003-09-12 23:13 98304] "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-15 00:54 253952] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-10-21 07:36 98304] "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-22 10:26 1235736] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784] "AlcWzrd"="ALCWZRD.EXE" [2004-07-29 04:34 2551808 C:\WINDOWS\ALCWZRD.EXE] "VTTimer"="VTTimer.exe" [2005-03-08 04:33 53248 C:\WINDOWS\system32\VTTimer.exe] "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 20:06 88363 C:\WINDOWS\AGRSMMSG.exe] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Compaq Connections.lnk - C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe [2004-10-21 07:49:57 45056] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=avgrsstx.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Compaq Connections\\6750491\\Program\\Compaq Connections.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\AVG\\AVG8\\avgemc.exe"= "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "C:\\Program Files\\AVG\\AVG8\\avgnsx.exe"= R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\Drivers\avgrkx86.sys [2008-08-22 10:28] R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-22 10:27] R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-22 10:26] R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-22 10:26] R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-08-22 10:28] R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2008-02-26 05:54] S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\zdqri9ag.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - www.pogo.com . . ------- File Associations (Beta) ------- . . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-31 22:46:07 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . r Running Proce . C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe C:\PROGRA~1\AVG\AVG8\avgam.exe C:\Program Files\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\AVG\AVG8\avgtray.exe . ************************************************************************** . Completion time: 2008-08-31 22:58:42 - machine was rebooted ComboFix-quarantined-files.txt 2008-09-01 02:57:55 ComboFix2.txt 2008-08-31 17:35:44 Pre-Run: 26,781,552,640 bytes free Post-Run: 26,715,443,200 bytes free 121 --- E O F --- 2008-08-14 02:03:50 angeljam

0

The computer appears to be clean, time for some cleanup and a double check with an online scanner. Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok. Download ATF Cleaner from this link: http://www.majorgeeks.com/ATF_Cleaner_d4949.html Run ATF-Cleaner Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. Run an online scan with Kaspersky from the following link: Kaspersky Online Scanner Note: If you have used this particular scanner before, you MAY HAVE YO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component Click Yes, when prompted to install its ActiveX component. (Note.. for Internet Explorer 7 users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.) The program launches and downloads the latest definition files. Once the files are downloaded click on Next Click on Scan Settings and configure as follows: Scan using the following Anti-Virus database: Extended Scan Options: Scan Archives Scan Mail Base Click OK and, under select a target to scan, select My Computer When the scan is done, in the Scan is completed window (below), any infection is displayed. There is no option to clean/disinfect, however, we need to analyze the information on the report. To obtain the report: Click on: Save Report As (above - red blinking arrow) Next, in the Save as prompt, Save in area, select: Desktop In the File name area, use KScan, or something similar In Save as type, click the drop arrow and select: Text file [*.txt] Then, click: Save Please post the Kaspersky Online Scanner Report in your reply.

0

---------------------- KASPERSKY ONLINE SCANNER 7 REPORT Monday, September 1, 2008 Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Monday, September 01, 2008 02:43:13 Records in database: 1172322 ---------------------- Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ G:\ H:\ I:\ J:\ Scan statistics: Files scanned: 65422 Threat name: 1 Infected objects: 1 Suspicious objects: 0 Duration of the scan: 02:54:25 File name / Threat name / Threats count C:\Program Files\Online Services\AOL90US\comps\toolbar\toolbr.exe Infected: not-a-virus:AdWare.Win32.SearchIt.t 1 The selected area was scanned. angeljam

0

This is optional but suggested. Navigate to and delete this file: C:\Program Files\Online Services\AOL90US\comps\toolbar\toolbr.exe This could be a false/positive, it`s being flagged as the file is similar in nature to not-a-virus:AdWare.Win32.SearchIt.t 1 The toolbar might be monitoring what you are doing and then depending on what you are searching for, it will display ads to your screen. How is the computer operating?

0

very very slow when you close out of windows it slides shut (starts at top and slides down screen to bottom) also on the desktop is a file that nobody created it just appeared the name of the folder is backups when i opened it it is just a bunch of numbers..it took almost 4 hrs to run that scan.. thank you so much for sticking with me on this :) do you know what this is she has a file when i click on C:/ it says Qoobox.. I deleted that.. just found file under easy internet signups that has Explore sign was downloaded and says Dailer_phonebook_ test.. I am finding folders that were not on here before that have weird names . angeljam

0

Qoobox is the quarantine folder for Combofix, should have been uninstalled when you ran combofix /u . But would be ok to delete...I would empty the trash bin. Lets see if we find anything else. Download SDFix.exe and save it to your Desktop. Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with SDFix or remove some of its embedded files which may cause "unpredictable results". Click on This Link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask. Remember to re-enable the protection again afterwards before connecting to the Internet. 1.Double click SDFix.exe and choose Install to extract it to its own folder on the Desktop. Please then reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. 2. Open the c:\SDFix folder and double click RunThis.cmd to start the script. Type Y to begin the script. It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot. Press any Key and it will restart the PC. 3. Your system will take longer that normal to restart as the fixtool will be running and removing files. When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons. 4. Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt Please download SuperAntiSpyware from the following link to your desktop: SuperAntiSpyware 1. Open SuperAntiSpware from its icon and install and Update it 2. Under Scanner Options make sure the following are checked (leave all others unchecked): 3. Close browsers before scanning. 4. Scan for tracking cookies. 5. Terminate memory threats before quarantining. 6. Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet. Now reboot into Safe Mode: How to enter safe mode(XP) Using the F8 Method Restart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Now Scan with SuperAntiSpyware 1. Open from the desktop icon or the program Files list On the left, make sure you check C:\Fixed Drive. 2. Perform a Complete scan. After scan,Verify they are all checked. 3. Click OK on the summary screen to quarantine all found items. 4. If asked if you want to reboot, click "Yes" and reboot normally. To retrieve the removal information after reboot, launch SUPERAntispyware again. 1. Click Preferences, then click the Statistics/Logs tab. 2. Under Scanner Logs, double-click SuperAntiSpyware Scan Log. 3. If there are several logs, click the current dated log and press View log. 4. A text file will open in your default text editor. 5. Please copy and paste the Scan Log results in your next reply. 6. Click Close to exit the program.

0

SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 09/04/2008 at 10:50 AM Application Version : 4.20.1046 Core Rules Database Version : 3556 Trace Rules Database Version: 1544 Scan type : Complete Scan Total Scan Time : 01:11:26 Memory items scanned : 154 Memory threats detected : 0 Registry items scanned : 5146 Registry threats detected : 0 File items scanned : 64478 File threats detected : 19 Adware.Tracking Cookie C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@insightexpressai[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@xiti[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.revsci[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@electronicarts.112.2o7[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@apmebf[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tribalfusion[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@casalemedia[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atdmt[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.adrevolver[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bs.serving-sys[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zedo[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising[2].txt [b]SDFix: Version 1.221 [/b] Run by Compaq_Owner on Thu 09/04/2008 at 09:00 AM Microsoft Windows XP [Version 5.1.2600] Running From: C:\Documents and Settings\Compaq_Owner\Desktop\sdfix\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-04 09:12:54 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\Compaq Connections\\6750491\\Program\\Compaq Connections.exe"="C:\\Program Files\\Compaq Connections\\6750491\\Program\\Compaq Connections.exe:*:Enabled:BackWeb for Presario" "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "C:\\Program Files\\AVG\\AVG8\\avgemc.exe"="C:\\Program Files\\AVG\\AVG8\\avgemc.exe:*:Enabled:avgemc.exe" "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe" "C:\\Program Files\\AVG\\AVG8\\avgnsx.exe"="C:\\Program Files\\AVG\\AVG8\\avgnsx.exe:*:Enabled:avgnsx.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Thu 18 Jan 2007 213 A.SHR --- "C:\BOOT.BAK" Wed 4 Aug 2004 60,416 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe" Wed 5 Mar 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Fri 7 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\ab59ac72525ea90a47679441587835c9\BIT7.tmp" Fri 25 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\fd0264849c01086f3c6b505dc02dbd44\BIT3.tmp" [b]Finished![/b] angeljam

0

That sounds like a windows issue rather than a virus or spyware. Do you have a windows xp disk?

0

yes i have her disk.. I also have another question. when we get this one fixed do I submit a different post for the HP? because when i first posted I said there were 3 and I only have one here at a time? Thank You angeljam

0

Yes on different threads. You could call the angeljam1, angeljam2 etc.. also if there are more than one user on the computer let me know please. We need to run "system file checker" if you have the xp disk it will help if it is needed as it will ask for the disk t ocomplete the scan. Go to start> run type in sfc /scannow (not the space after sfc) the press enter and let it run.

0

I just ran what you said I did not have to use her disk.. but the thing is so slow. can I remove some of the programs we installed? and see if that helps or maybe just redo her computer? Also I don't know if it came from her computer or not but My personal computer has been infected avg found them and removed them. I just wanted to know sents her computer was hooked up to my internet could that have been how i got them because I have never had problem on mine I have setup very secure network..sorry So her other two computers i'm doing at her house because I don't want mine to get infected..maybe thats not how I got them but little weird to me all 3 of hers and now bring hers to my house and now mine.. Just weird.. Thanks angeljam

0

Unless you networked your computer to her computer or run a infected disk(floppy or cd) on both computers then a virus/spyware couldn't be transfrered between the two computer. Being connected to the internet with out an antivirus, firewall or some type of good antispyware is most likley the cause of infection and your house or hers would not make any difference.

0

lolwut

0

thank you for your help.. The computer is running alittle better I have cleaned it up some only having problem with about 5-6 files in the temp. internet folder that will not remove.. waiting on her memory to get here and I hope that will help alot.. (also I feel stupid I know how I got mine took care of it ) thanks again.. angeljam

0