Here are the logs:
Pandasoftware - 1 spyware found, no option to remove it.
Bitdefender Log
C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Infected with: BehavesLike:Win32.FileInfector
C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Disinfection failed
C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Deleted
D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Infected with: BehavesLike:Win32.FileInfector
D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Disinfection failed
D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Deleted
D:\Install\Windows\mwav.exe=>(ZIP Sfx s)
Updated
D:\Install\Windows\mwav.exe
Update failed
D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Infected with: BehavesLike:Win32.FileInfector
D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Disinfection failed
D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Deleted
Spy Sweeper Log
********
16:41: | Start of Session, 12 November 2005 |
16:41: Spy Sweeper started
16:41: Sweep initiated using definitions version 572
16:41: Starting Memory Sweep
16:47: Memory Sweep Complete, Elapsed Time: 00:05:43
16:47: Starting Registry Sweep
16:47: Registry Sweep Complete, Elapsed Time:00:00:36
16:48: Starting Cookie Sweep
16:48: Found Spy Cookie: hbmediapro cookie
16:48: sarah &
jamie@adopt.hbmediapro[2].txt (ID = 2768)
16:48: Found Spy Cookie: atwola cookie
16:48: sarah &
jamie@atwola[1].txt (ID = 2255)
16:48: Found Spy Cookie: gostats cookie
16:48: sarah &
jamie@c3.gostats[1].txt (ID = 2748)
16:48: Found Spy Cookie: go2net.com cookie
16:48: sarah &
jamie@go2net[1].txt (ID = 2730)
16:48: sarah &
jamie@gostats[2].txt (ID = 2747)
16:48: Found Spy Cookie: touchclarity cookie
16:48: sarah &
jamie@hsbc.touchclarity[1].txt (ID = 3566)
16:48: Found Spy Cookie: domainsponsor cookie
16:48: sarah &
jamie@landing.domainsponsor[1].txt (ID = 2535)
16:48: Found Spy Cookie: 2o7.net cookie
16:48: sarah &
jamie@microsoftwga.112.2o7[1].txt (ID = 1958)
16:48: sarah &
jamie@monster.gostats[2].txt (ID = 2748)
16:48: Found Spy Cookie: revenue.net cookie
16:48: sarah &
jamie@revenue[1].txt (ID = 3257)
16:48: Found Spy Cookie: tribalfusion cookie
16:48: sarah &
jamie@tribalfusion[1].txt (ID = 3589)
16:48: Cookie Sweep Complete, Elapsed Time: 00:00:01
16:48: Starting File Sweep
17:10: Found Trojan Horse: sdbot
17:10: adiras.ini (ID = 74768)
17:17: File Sweep Complete, Elapsed Time: 00:29:48
17:17: Full Sweep has completed. Elapsed time 00:36:16
17:17: Traces Found: 12
17:19: Removal process initiated
17:19: Quarantining All Traces: sdbot
17:19: Quarantining All Traces: 2o7.net cookie
17:19: Quarantining All Traces: atwola cookie
17:19: Quarantining All Traces: domainsponsor cookie
17:19: Quarantining All Traces: go2net.com cookie
17:19: Quarantining All Traces: gostats cookie
17:19: Quarantining All Traces: hbmediapro cookie
17:19: Quarantining All Traces: revenue.net cookie
17:19: Quarantining All Traces: touchclarity cookie
17:19: Quarantining All Traces: tribalfusion cookie
17:19: Removal process completed. Elapsed time 00:00:09
********
16:39: | Start of Session, 12 November 2005 |
16:39: Spy Sweeper started
16:41: Your spyware definitions have been updated.
16:41: | End of Session, 12 November 2005 |
I turned of System Restore before restarting the machine after running the scans (I forgot to do it before). I also deleted the items quarantined.
My mouse is still playing up and opening things before I have double clicked. It is very annoying.
"Did you perform a 'clean install'? Delete all partitions, create new ones, etcetera."
I have 3 partitions. I reformated the XP partition before re-installing, but left my Win98 and file partition alone. At the time the File partition was empty as I only used it for storing scanner images in when using Win98 (my scanner doesn't work with XP). I am now using this partition to store all my personal files in and is included in any virus scans I do.
Any more ideas?
Thanks,
Sarah