Computer taken over by Virus?

[essexboy]

Hi I see that you have run Combofix - could I see the log please

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:80
  IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:80
  
  :Files
  ipconfig /flushdns /c
  
  :Commands
  [purity]
  [resethosts]
  [emptytemp]
  [EMPTYFLASH]
  [CREATERESTOREPOINT]
  [Reboot]

  
  
• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
  

[qim]

Hi Essexboy. And thanks.

I followed your instructions but the first run deleting files, although it ptoduced a log, I can't fins it. I suppose I closed the log without saving it but there was no warning about saving.  After rebooting I did a new scan. This time it only produced an otl.txt but no extras.txt.  See attachment.

As for ComboFix, I did not run it since you instructed me to do so earlier in this thread.

[essexboy]

Do you recognise this document ?
C:\Documents and Settings\Qimi\My Documents\Говорим КПРФ.doc

The losiing time could be a failing CMOS battery http://www.computerhope.com/issues/ch000239.htm

What other problems are you experiencing ?

[qim]

C:\Documents and Settings\Qimi\My Documents\Говорим КПРФ.doc

That's part of an article from Pravda that I copies and pasted on a Word document.

My only real problem is the clock.  Since coming to you and doing the OTL scans the computer is behaving.  I know about the CMOS battery possibility but as it would mean changing the motherboard, I am hoping that it is a virus...

Should I do a Combofix scan?

Thanks you

qim

[essexboy]

You can try Combofix and I will look at the log certainly.  But, to change the CMOS battery you do not need to change the motherboard