   Ok, So i REALLY need your ideas on this one, before i pull my hair out!
  Ok so somehow i got infested with spyware today, on this PC.Now i have gotten rid of about 95% of the spyware, i would say. C: had stuff everywhere, lots of duff processes etc, but i have a few remaining problems. I have something throwing up Mozilla to a spyware page, whenever it wants. Now this is what i have tried to get rid of it:- Ran Adaware on it, returns results, says it can remove all but 2 entries. If i run it again it finds about the same amounts as it previously did.- Ran Spybot S&D, near as dammit the same response.- I have closed Explorer.exe and tried deleting said files myself, wont work. It says either permission is denied or that another process is using the file. A DLL in that last case.- I have tried all of the above in safe mode and everything is the same.- I downloaded Windows Defender, returns no results.- I have manually checked my Services list, no abnormalities in there.The file names are made up of [jumbled letters].dll and are in System32, well atleast those are the ones i know about. I have a legit and up to date copy of Windows, with Service pack 2.I'm completely stuck here, any ideas?Dave   
  give us some of the file names if possible and the symptoms your computer is showing. im generally pretty good at killing spyware but i'll need more info.what page is it opening? has it changed your homepage setting and if so then what to?in msconfig, what new startup programs has it added? what pre-cache files has it added?   ;  Sounds like you've got some pretty nasty shit in there, and possibly some crap that's exploiting the filesystem to protect itself from deletion.Safe mode (yes, again). Ad-aware. Spybot. HijackThis. All of 'em. Virus scan what's left.Then go into msconfig and make sure there's nothing extra running.If it's still stuck like that, you're pretty much hooped. Back up your data and wipe the drive. Now stop downloading Bonzi Buddy. [wink]   ;  The results Spybot cooughs up are:Avenue A, Inc.Command Service (says it can't get rid of this one)DoubleClickGIGAsearchLook2Me.TopconvertingMediaPlexNicTechNetworks.Zestyfind.Now it gives me these results each time, even though i ask it to fix them. Command Service is the only one it cant fix. Now i have just downloaded a program called Security Task Manager and it is showing me that a process/task with the name wvutuvt.dll is a 92%risk. I asked it to delete it and it couldn't do it. This is located in System32.;  Oh and another symptom is that it seems to have shut my Windows Firewall down and i cant restart it. When attempting to it simply says "Due to an unidentified problem, Windows cannot display teh Windows Firewall Settings.Dave   ;  open windows defender and go to tools. then flip to currently running processes and give it a sec to identify them. then post every process not identified. now flip to startup programs. post every start up program not identified.   ;  if it is killing off your firewall, is your network showing any odd activity? I've heard of many nasty viriuses that will setup infected computers as spam bots, or porn servers.If you have an extra computer you can use as a webbrowser, I would suggest killing  your network connection to the infected computer.   ;Quote:Original post by DaveOh and another symptom is that it seems to have shut my Windows Firewall down and i cant restart it. When attempting to it simply says "Due to an unidentified problem, Windows cannot display teh Windows Firewall Settings.DaveYou have a hardware firewall, don't you?   ;  By "throwing up mozilla to a spyware page whenever it wants" do you mean "at random times it just opens up some spyware web-page"?I think that's Look2Me acting (among others who might be doing the same thing), I forgot what you use to remove it.I'll look for it and tell you if I find it.Edit:  I can't seem to remember where I found it.  It was a quick-n-dirty console program, but I forgot it's name...   ;  That Look2Me is probably going to be the worst out of most of them.  I don't believe it's the primary source of your problem, but it's a start.Chances are, whatever it is you have is probably similar to that VX2 crap that was screwing with people's systems some time ago.  Well, at this point, usig a restore point from your system won't help, so try this.-Jump into safe mode with Networking-Go into MSCONFIG-> startup  and disable everything-Close that, and then update and run your spyware/adware removal tools.-Next, check out http://housecall.antivirus.com, it's a free onlie scan that will remove any Viruses on your computer, and in some cases, certain types of spyware as well.-After all of this, jump back into normal mode, if your computer is still acting the same.  Download an application called HijackThis.  run the application, and post a log here.  That way other people can take a look at what you have, and try to pick things apart.   