VIRUS?? HJT log

[doc53]

In the last few days when I start my computer, an internet window comes up:
http://mynbx247.info/phpbb/index3.html

The window is always blank. However, when my kids us AIM their messages (& virus?)are being sent to everyone on their buddy lists, so they can't use it anymore.

I used Norton AV and I believe this comes up as the only problem. I delete it, but it just keeps coming back. Please advise what we should do. Thanks.

<Removed HJT log>

[Dave@Bytes]

Viruses are a pain. I often find myself reformatting if I get one that cannot be exorcised. Have you tried running the scan from SAFE MODE? (hold F8 at boot to get the Safe Mode option).

Sometimes if a virus is already in memory it won't delete.

[AngeloPC]

Doc,
You've been WeatherBugged. Uninstall WeatherBug. Download Webroot's Spy Sweeper(14-day trial) or Microsoft's AntiSpyware Beta(free) from their website. Do a complete system scan.

[doc53]

I uninstalled Weather Bug, however we've had that on here for over a year. I ran those two programs and did a scan. Whatever Webroot found, it got rid of.

I still have this problem. Any ideas??

If I can't fix it otherwise, I'll have to have my son reformat, but that may not happen before he leaves for camp on Sunday.

[CJDeak]

Okay. Run ALL of this software, in the order listed:

SpywareDoctor (www.download.com)
Ad-Aware SE 1.06 (www.pctechbytes.com/downloads.htm)
Spybot Search & Destroy 1.4 (www.pctechbytes.com/downloads.htm)
Microsoft Anti-Spyware Beta (www.pctechbytes.com/downloads.htm)
Webroot


Then redo HJT

[AngeloPC]

Microsoft's AntiSpyware Beta(free)

[doc53]

<removed HJT log>

[doc53]

I also found out that this came as either an email or instant message from a friend of my D, who also had the virus. When my D clicked on the highlighted "this" that's when we got the virus. The friend said she used Spyweb to get rid of it. However I've run that several times, and still can't get rid of it. It sends messages to everyone on her buddy list if she goes on AIM (we don't have AOL).

[AngeloPC]

You can't get rid of a virus with antispyware software. You need an antivirus program. I would, also, completely uninstall AIM before trying to get rid of the virus.

[Z man]

Did you try the recomendation of Davpurc to start in safe mode then run your Norton Antivirus? It sounds like the virus is loading itself into your system at startup. If you run the antivirus in safe mode you might be able to get rid of it before it has a chance to load.