Spyware issue i think

please help me over the last few days my facebook layout has changed on the far right i now have a complete list of my friends which appears over the chat box, the chat box cannot be opened or can i no longer go offline also the top bar where you recieve notifications no longer displays anything unless i click into my profile. it appears i have spyware however i have used spybot and avg in safemode yet it hasnt changed or removed it. i have tried to do a restore also. it wont let me .
Any advice please

Lets try this to start with maybe...Please try to run both of these

Taken from Superantispyware web site
Compatibility
‘SUPERAntiSpyware.com software is compatible with 2000, XP Home/Professional, 2003, Server 2008, Vista and Windows 7.

SUPERAntiSpyware is provided as a native 32-bit application and a native 64-bit application. The installer will install the proper version for your operating system.

We offer an older version 4.24 that works with Windows 98, 98SE, and ME.’



Disclaimer ;Run at your own risk

Next run Superantisypware (SAS):

Download and scan with [You must be registered and logged in to see this link.] Free for Home Users

• Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  
• An icon will be created on your desktop. Double-click that icon to launch the program.
  
• If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates".
  
  
  NB; this program should be run while off-line so once updated please go off- line to run the scan
  
  
  
• In the Main Menu, click the Preferences... button.
  
• Click the Scanning Control tab.
  
• Under Scanner Options make sure the following are checked (leave all others unchecked):
  • Close browsers before scanning.
    
  • Scan for tracking cookies.
    
  • Terminate memory threats before quarantining.
• Click the "Close" button to leave the control center screen.
  
• Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  
• On the left, make sure you check C:\Fixed Drive.
  
• On the right, under "Complete Scan", choose Perform Complete Scan.
  
• Click "Next" to start the scan. Please be patient while it scans your computer.
  
• After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  
• Make sure everything has a checkmark next to it and click "Next".
  
• A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  
• If asked if you want to reboot, click "Yes".
  
• To retrieve the removal information after reboot, launch SUPERAntispyware again.
  • Click Preferences, then click the Statistics/Logs tab.
    
  • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    
  • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    
  • Please copy and paste the Scan Log results in your next reply.
• Click Close to exit the program.

Run correctly this scan may take up to 8 or more hours to run so be patient

.

Taken from Malwarebytes web site
‘Support for Windows 2000, XP, Vista, and 7 (32-bit and 64-bit)’.

Disclaimer; Run at your own risk

Please download [You must be registered and logged in to see this link.] and save it to your desktop.

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes , they may interfere or alert you.

• Make sure you are connected to the Internet to be able to install and update the program
  
  (NB once the program has updated please disconnect from the Internet and run the scan while off- line )
  
  
  
• Double-click on mbam-setup.exe to install the application.
  
  
• When the installation begins, follow the prompts and do not make any changes to default settings.
  
• When installation has finished, make sure you leave both of these checked:
  
  
  • Update Malwarebytes' Anti-Malware
    
  • Launch Malwarebytes' Anti-Malware
  
  
• Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

• If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  

On the Scanner tab:

• Make sure the "Perform Quick Scan" option is selected.
  
• Then click on the Scan button.
  
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  
• Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

• Click on the Show Results button to see a list of any malware that was found.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When removal is completed, a log report will open in Notepad.
  
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  
• Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  
• Exit MBAM when done.

Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

Here is the result,however the problem still is there ?

Malwarebytes' Anti-Malware 1.50.1.1100
[You must be registered and logged in to see this link.]

Database version: 6938

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

24/06/2011 15:58:52
mbam-log-2011-06-24 (15-58-39).txt

Scan type: Quick scan
Objects scanned: 162196
Time elapsed: 13 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

You have only run one scan ( why?) and you neglected to do as instructed ; please try again...

Sorry i ommited the 1st log here it is below

SUPERAntiSpyware Scan Log
[You must be registered and logged in to see this link.]

Generated 06/24/2011 at 03:10 PM

Application Version : 4.54.1000

Core Rules Database Version : 7320
Trace Rules Database Version: 5132

Scan type : Complete Scan
Total Scan Time : 01:43:21

Memory items scanned : 918
Memory threats detected : 0
Registry items scanned : 8661
Registry threats detected : 0
File items scanned : 38943
File threats detected : 1

Adware.MyWebSearch/FunWebProducts
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\RICHED20.DLL

Sorry but you still have not done as the Scan instructions say!!

Please re read them them then try again !!

Hi Ruby
Ihave followed your instructios to the letter here are the resultsSUPERAntiSpyware Scan Log
[You must be registered and logged in to see this link.]

Generated 06/28/2011 at 07:33 PM

Application Version : 4.54.1000

Core Rules Database Version : 7320
Trace Rules Database Version: 5132


Malwarebytes' Anti-Malware 1.50.1.1100
[You must be registered and logged in to see this link.]

Database version: 6938

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

28/06/2011 20:09:59
mbam-log-2011-06-28 (20-09-59).txt

Scan type: Quick scan
Objects scanned: 161114
Time elapsed: 11 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



Scan type : Complete Scan
Total Scan Time : 02:21:20

Memory items scanned : 879
Memory threats detected : 0
Registry items scanned : 8677
Registry threats detected : 0
File items scanned : 38917
File threats detected : 1

Adware.MyWebSearch/FunWebProducts
C:\SYSTEM VOLUME INFORMATION\_RESTORE{C219E257-1CC2-45D9-BB58-7E0C1B10CD52}\RP1\A0000396.DLL

grazzzz wrote:or can i no longer go offline also the top bar where you recieve notifications no longer displays anything unless i click into my profile. it appears i have spyware however i have used spybot and avg in safemode yet it hasnt changed or removed it.

i have tried to do a restore also. it wont let me .
Any advice please

I do not think it will let you do a System Restore as I think your System Restore itself is infected

I would like you to get a check up a forum that can run some in-depth scans to see what else is happening ; do you know of any Computer specialist forums who you trust to clean a machine or do you wish me to suggest some for you ?

thank you please suggest some or should i just re load windows xp ?
thanks
Graham

grazzzz wrote:thank you please suggest some or should i just re load windows xp ?
thanks
Graham

If you can do a reload of XP with a Legit Licence Key and get all your Windows Updates ( including SP3 loaded ) plus your antivirus program fully loaded and updated that would be good plus all legit programs on there !!

Then run both those scans again just to prove to ourselves that all is now OK ..that would be good...

Then try Facebook again ...

But; May I suggest you think about using a different antivirus program as AVG is not really good to recommend ?

Do you wish to try that and post again on a fresh thread if you still have problems or do you wish us to keep this thread open pro temp?

Ruby firstly thank you for your time and patience !
Secondly the problem i had has disappeared when i restarted my computer this morning. i dont know how ? but facebook homepage has returned to normal, so thank you for your help and advice
regards
Graham

grazzzz wrote:Ruby firstly thank you for your time and patience !
Secondly the problem i had has disappeared when i restarted my computer this morning. i dont know how ? but facebook homepage has returned to normal, so thank you for your help and advice
regards
Graham

Gladly sent to solved

( but it might not harm to do a reinstallation of the OS!!)