Messenger Trojan?

[gaianorm]

Hi its me..again ... new post new problem with another pc (my sister's one)
Sometimes when she surf with Firefox, AD windows popping up! I have checked with Spybot before and found a messenger trojan (I don't remember the exact name...).
Then i've checked with AVZ4 ad HiJack , so here are the most famous 3 LOGS files
I hope you can help me again
many thanks and maerry Xmas.
Ciao
G.

[Rene-gad]

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore

- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\cecilia\impostazioni locali\dati applicazioni\iwyiucq.exe');
 DelBHO('{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}');
 DelBHO('{7E853D72-626A-48EC-A868-BA8D5E23E045}');
 QuarantineFile('C:\documents and settings\cecilia\impostazioni locali\dati applicazioni\iwyiucq.exe','');
 QuarantineFile('iwyiucq.exe','');
 DeleteFile('C:\documents and settings\cecilia\impostazioni locali\dati applicazioni\iwyiucq.exe');
 DeleteFile('iwyiucq.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..

[drongo]

gaianorm, you should learn your sister to use NoScript- the best browser protection that you can get among browsers.

[gaianorm]

Hi,
im tried to upload logs but your system says that im over upload quota...what can i do?
thx
G.

[Rene-gad]

that im over upload quota...what can i do?

You could either use a file sharing hosts (e.g. rapida) or delete the attachments from your previous topic.