At this stage you should:
1) Backup all you files.. DO IT NOW!!!
2) Format the hard drive and reinstall Windows
3) Install all your drivers
4) Go to Microsoft update and run in Custom Mode. Install everything. Reboot and repeat until nothing is left.
5) Install full time (active) Virus and full time Spyware protection.
==================
Reformat and Reinstall
Run Belarc Adviser: Print out results.
http://www.belarc.com/free_download.html
Locate all your drivers and software disks and keys.
Read the following prior to reformatting:
Pre Flattening and Reinstall Checklist
http://blog.angrypets.com/2006/01/ultimate_prefla.html
http://www.thefuhrmans.com/reformat_hd.htm
Reformat and install. (Cleans drive. You loses all data)
http://support.microsoft.com/kb/313348
http://www.microsoft.com/windowsxp/using/setup/winxp/install.mspx
http://www.whitecanyon.com/reformat-the-hard-drive-in-windows-xp.php
http://www.smartcomputing.com/editorial/article.asp?article=articles/archive/l0910/32l10/32l10.asp
Since you reinstalled Windows you need to install all the drivers for your modem, computer/motherboard; video card; sound card; network card; printer; scanner; mouse; web cam; etc.
How to update a Windows hardware driver
http://www.bleepingcomputer.com/tutorials/tutorial119.html
To find drivers:
Google the manufacturer's name and go to the manufacturer's site for you computer/motherboard; video card; sound card; network card; printer; scanner; mouse; web cam; etc. Each site will have a support section to find the latest drivers and download them. You will need to know the make and model number. If you do not know the make and model number run Belarc Advisor and look in Windows Device Manager.
Sites that analyze your computer for the requires drivers and charge a fee to allow you to download the drivers.
http://www.driveragent.com/?PHPSESSID=0507717b38e3398c6e71a415979a326c
http://www.drivershq.com/
====================
Securing a Personal Machine
http://safecomputing.umn.edu/studentchecklist.html
OS Reinstallation vs. Virus Removal
http://safecomputing.umn.edu/guides/rebuild_repair.html
If you follow all the following steps it may get rid of your problem and prevent future problems. All programs listed are free.
------------------------------
Update your Full Time (Active) antivirus and run a full scan.
If you do not have active virus protection, install only one. All are excellent.
AVG Antivirus 7.5 Free Edition
http://free.grisoft.com/freeweb.php/doc/avg-anti-virus-free/lng/us/tpl/v5
http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10669237.html?tag=lst-0-1
or
Free antivirus - avast! 4 Home Edition
http://www.avast.com/eng/avast_4_home.html
---------------------------------------------------------
Update your Full Time (Active) spyware protection and run a full scan. If you do not have active spyware protection, install:
Windows Defender
http://www.microsoft.com/athome/security/spyware/software/default.mspx
---------------------------------------------------------
Install the following four programs and run weekly or at least monthly. You need all four. They are not a substitute for full time spyware and virus protection. They will greatly increase your protection. Install and run now.
Ad-Aware SE Personal (update + full scan)
http://www.lavasoftusa.com/products/ad-aware_se_personal.php
Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunize
http://www.safer-networking.org/en/mirrors/index.html
SpywareBlaster: Update then open and click “enable all protection”.
http://www.javacoolsoftware.com/spywareblaster.html
SUPERAntiSpyware free version: (update + scan)
http://www.superantispyware.com/
------------------------------
Install:
CCleaner:
http://www.ccleaner.com/
Do not install optional toolbar.
Removes tracking cookies, unneeded files, history
In options.
Set to run when computer starts.
Place cookies you want to keep in save list
-------------------------------------------------
Install either one not both:
McAfee Site Advisor: Internet Explorer and Firefox
http://www.siteadvisor.com/
McAfee SiteAdvisor helps protect you from all kinds of Web-based security threats including spyware, adware, spam, viruses, browser exploits, and online scams.
TrendProtect™
http://www.trendsecure.com/portal/en-US/free_security_tools/trendprotect.php
TrendProtect is a FREE browser plug-in that helps you avoid Web pages with unwanted content and hidden threats.
--------------------------------
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.
In severe cases your system restore files will also be infected. In these cases you will need to turn off system restore to prevent malware hiding in the system restore files and reinfecting the computer during removal or during a future system restore. Turning off system restore deletes the system restore files.
Right click on "my computer"> Properties > System Restore Tab > Check box turn of system restore
After the malware is removed turn on system restore.
------------------------------
Run this time:
CWShredder: run
http://www.trendmicro.com/cwshredder/
Shoot The Messenger
http://www.grc.com/stm/shootthemessenger.htm
VX2 tool for Ad-Aware and run tool (Install and run)
http://www.lavasoftusa.com/support/securitycenter/vx2_cleaner.php
-----------------------------------------
Special Removal Tools
Run only if indicated
Roguefix.bat
http://www.internetinspiration.co.uk/roguefix.htm
SmitFraudFix
http://www.geekstogo.com/forum/How_to_use_SmitFraudFix-t109268.html
Vundo Fix and
VirtumundoBegone (if VundoFix does not work)
http://www.bleepingcomputer.com/forums/topic18610.html
------------------------------
Run this time and monthly:
Microsoft Update:
Run in "Custom Mode". Install everything, reboot and repeat until nothing is left to install.
http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us
Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall ports
http://onecare.live.com/site/en-us/default.htm
Malicious Software Removal Tool (run “full scan”)
http://www.microsoft.com/security/malwareremove/default.mspx
------------------------------
Rootkit Removers
Pick any 2 install and run one each month.
AVG Anti-Rootkit
http://www.grisoft.com/doc/products-avg-anti-rootkit-update-app-art/?ver=1.1.0.29
F-Secure BlackLight
http://www.f-secure.com/blacklight/
Panda Anti-Rootkit
http://www.pandasoftware.com/products/antirootkit/
http://www.pandasecurity.com/homeusers/downloads/register?Tipo=1&CodigoProducto=39&Idioma=2&TipoUsuario=1&sec=down&Country=US-en&TipoLead=2&Ref=WWEN-ROOTK-DES&track=36355
http://www.download.com/Panda-Anti-Rootkit/3000-2239_4-10717197.html?tag=lst-0-1
Sophos Anti-Rootkit
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html
------------------------------
Online Free Scanners:
Run Trend Micro, Kaspersky, and Panda Scan now.
Run a different one each month.
BitDefender Online Scanner
http://www.bitdefender.com/scan8/ie.html
CA eTrust® PestScan
http://pestpatrol.com/pestscan/index.htm
eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
F-Secure Online Virus Scanner
http://support.f-secure.com/enu/home/ols.shtml
Kaspersky - Free Online Virus Scan
http://www.kaspersky.com/virusscanner
McAfee - Free Scan
http://us.mcafee.com/root/mfs
Panda Software - ActiveScan
http://www.pandasoftware.com/activescan/activescan/ascan_2.asp
Symantec (norton) - Security Check
http://security.symantec.com/sscv6/default.asp
Trend Micro™ HouseCall
http://www.trendmicro.com/hc_intro/default.asp