google can always help
heres from a forum sounds like this guy had the same spyware
http://www.bleepingcomputer.com/foru...hp/t49209.html
-------
Hi, I hope this is not too long-
I have a machine with IE 6 that is constantly being hijacked into the following web pages and has slowed down noticeably. The pages come up most often while we are at the Weather Channel, but have come up at other times.
NO - I do not go to the porn sites!
http://www.amaena.com/securityworm5/..._tz_scq_2&lid=
http://www.worlddatinghere.com/iframe.php?did=10186
http://www.winfixer.com/download/200...6h_9&lid=keyin
http://www.sexbuddies.com/signup/joi...13735376630%3F
http://adultfriendfinder.com/go/g674873.subdate
http://www.sexbuddies.com/signup/sig...13735376630%3F
It started about 6 weeks ago and I have tried the whole gambit of cures. First, here is information about my system and protection. I have XP Home with SP2 and use IE 6 and Outlook. Since I have been hijacked I have been using Mozilla Firefox and have started to like it, but want to have the machine clean no matter what browser I use. I have ZoneAlarm Pro installed, Norton Anti-Virus, Spybot, Ad-Aware, Spyware Blaster, CCLeaner, Blacklight Beta, Trojan Hunter and of course Hijack This. I update all software twice a week and run scans with Norton’s, Spybot, and Ad-Aware daily. My local ISP catches most of the SPAM using software from Vircom.
The Spybot will detect winfixer, correct it and within a few minutes it is back. I ran HJT and had the results analyzed twice and performed all the recommended corrections and still it comes back. I have backed up all my data files to DVDs as I am ready for the splurge on an upgrade to XP Pro and then do a re-format. The sad thing there is that some of the SW I have, such as Office only had a limited number of installs and I will have to buy new if that is the course I take. I am including a HJT log that I made this evening after I performed all the recommended operations you outline in the “Preparation Guide for use before posting a HijackThis Log.” I chose Panda as the on line anti-virus program, and have ran Stinger from McAfee, all with no luck in solving the problem.
Here is the latest log from HJT. Thank you in advance for anything you can do for me.