IE Closing Automaticly and Mouse Playing Up

[pinksparklegirl]

My PC has developed several problems in the past couple of days. I have recently done a fresh install of XP on my machine. All updates are loaded and Anti Viruses up to date, but think something must have crept into my computer while things were updating.

These are the most annoying symptoms:

1. My mouse is behaving strangly. It opens files on a single click sometimes (it is not set to do this), and other times takes ages for them to open. Sometimes programs/files will open up and I don't appear to have clicked on them.

2. IE sometimes closes by itself when I close another program (never the same one).

3. I can no longer Cache sites in Google.

I have done Spyware/Virus checks with Spybot, Adaware, CWShredder, Ewido, Norton...the only things any of them find are cookies and Norton finds nothing.
Windows updates have been installed.
I tried System Restore to the two most recent points but neither works.
There are no updated drivers for my mouse.

I don't know what else to do now!

If there is something causing these symptoms then I'm buggered if I know where to look. Oh yes, I also ran System File Checker but is hasn't helped

Can anyone help?

[Jazz]

Try a couple of online scans, as per the following links. If they do find anything, please don't forget to disable System Restore prior to purging, as you risk the highly likely chance of being reinfected with the very thing you are trying to eradicate. In fact, System Restore may even be your problem: -

Panda Free Online ActiveScan

BitDefender Free Online Virus Scan

Also, download the following trial version of Spy Sweeper and report back with your findings. Don't forget to update it immediately before you run it. Once again, if it does find anything, the aforementioned scenario with System Restore applies: -

Spy Sweeper

..........I have recently done a fresh install of XP on my machine............

Did you perform a 'clean install'? Delete all partitions, create new ones, etcetera.

[pinksparklegirl]

Here are the logs:

Pandasoftware - 1 spyware found, no option to remove it.


Bitdefender Log
C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Infected with: BehavesLike:Win32.FileInfector

C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Disinfection failed

C:\Documents and Settings\Sarah & Jamie\Local Settings\Temp\mwavscan.com
Deleted

D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Infected with: BehavesLike:Win32.FileInfector

D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Disinfection failed

D:\Install\Windows\mwav.exe=>(ZIP Sfx s)=>mwavscan.com
Deleted

D:\Install\Windows\mwav.exe=>(ZIP Sfx s)
Updated

D:\Install\Windows\mwav.exe
Update failed

D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Infected with: BehavesLike:Win32.FileInfector

D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Disinfection failed

D:\Install\Windows\MicroWorld Anti Virus\mwavscan.com
Deleted



Spy Sweeper Log
********
16:41: | Start of Session, 12 November 2005 |
16:41: Spy Sweeper started
16:41: Sweep initiated using definitions version 572
16:41: Starting Memory Sweep
16:47: Memory Sweep Complete, Elapsed Time: 00:05:43
16:47: Starting Registry Sweep
16:47: Registry Sweep Complete, Elapsed Time:00:00:36
16:48: Starting Cookie Sweep
16:48: Found Spy Cookie: hbmediapro cookie
16:48: sarah & jamie@adopt.hbmediapro[2].txt (ID = 2768)
16:48: Found Spy Cookie: atwola cookie
16:48: sarah & jamie@atwola[1].txt (ID = 2255)
16:48: Found Spy Cookie: gostats cookie
16:48: sarah & jamie@c3.gostats[1].txt (ID = 2748)
16:48: Found Spy Cookie: go2net.com cookie
16:48: sarah & jamie@go2net[1].txt (ID = 2730)
16:48: sarah & jamie@gostats[2].txt (ID = 2747)
16:48: Found Spy Cookie: touchclarity cookie
16:48: sarah & jamie@hsbc.touchclarity[1].txt (ID = 3566)
16:48: Found Spy Cookie: domainsponsor cookie
16:48: sarah & jamie@landing.domainsponsor[1].txt (ID = 2535)
16:48: Found Spy Cookie: 2o7.net cookie
16:48: sarah & jamie@microsoftwga.112.2o7[1].txt (ID = 1958)
16:48: sarah & jamie@monster.gostats[2].txt (ID = 2748)
16:48: Found Spy Cookie: revenue.net cookie
16:48: sarah & jamie@revenue[1].txt (ID = 3257)
16:48: Found Spy Cookie: tribalfusion cookie
16:48: sarah & jamie@tribalfusion[1].txt (ID = 3589)
16:48: Cookie Sweep Complete, Elapsed Time: 00:00:01
16:48: Starting File Sweep
17:10: Found Trojan Horse: sdbot
17:10: adiras.ini (ID = 74768)
17:17: File Sweep Complete, Elapsed Time: 00:29:48
17:17: Full Sweep has completed. Elapsed time 00:36:16
17:17: Traces Found: 12
17:19: Removal process initiated
17:19: Quarantining All Traces: sdbot
17:19: Quarantining All Traces: 2o7.net cookie
17:19: Quarantining All Traces: atwola cookie
17:19: Quarantining All Traces: domainsponsor cookie
17:19: Quarantining All Traces: go2net.com cookie
17:19: Quarantining All Traces: gostats cookie
17:19: Quarantining All Traces: hbmediapro cookie
17:19: Quarantining All Traces: revenue.net cookie
17:19: Quarantining All Traces: touchclarity cookie
17:19: Quarantining All Traces: tribalfusion cookie
17:19: Removal process completed. Elapsed time 00:00:09
********
16:39: | Start of Session, 12 November 2005 |
16:39: Spy Sweeper started
16:41: Your spyware definitions have been updated.
16:41: | End of Session, 12 November 2005 |

I turned of System Restore before restarting the machine after running the scans (I forgot to do it before). I also deleted the items quarantined.

My mouse is still playing up and opening things before I have double clicked. It is very annoying.

"Did you perform a 'clean install'? Delete all partitions, create new ones, etcetera."

I have 3 partitions. I reformated the XP partition before re-installing, but left my Win98 and file partition alone. At the time the File partition was empty as I only used it for storing scanner images in when using Win98 (my scanner doesn't work with XP). I am now using this partition to store all my personal files in and is included in any virus scans I do.

Any more ideas?

Thanks,
Sarah

[Jazz]

I don't why I didn't think of this before. Try another mouse. Is IE still acting up???

For future reference, you should really have deleted the XP partition, created another one and then formatted it before installing XP. It's a totally clean way of doing things.

Download CCleaner. Run the 'Windows' and 'Applications' under 'Cleaner Settings' and re-run all the scans you have performed, again, including the online antivirus scans and see what occurs, as it is obvious some malware is still present. Do not use the Registry Cleaner located under 'Issues', when you use CCleaner. You will find that anti-malware scans to need to be repated a number of times, as many as if takes, really, in order to purge a system. Don't forget to disable System Restore again, prior to scanning.

Ultimately, you may have to post a HijackThis log, but let's see what occurs after the aforementioned has been completed.

Incidentally, do you have a firewall installed, properly configured and up-to-date with all relevant updates???