Search:

Cool, well, I've done all that stuff.

Thanks for your help!

Thanks for your help!

That malware complaints page, what's the goal of it? I thought malware was already illegal as it is.

There's more? Ok, I'm ready.

It looks like the redirect is fixed.

It looks like it's fixed!

Looks like that google redirect problem is pretty widespread, is it covered by Spybot's immunize function?

Should I be using immunize? I've heard that it might screw...

Hard to say, it didn't do it every time I clicked a link, only maybe half the time.

I'll give it a thorough trying today and let you know.

Ok, it didn't prompt me to restart or do any registry changing, but here's the log:

GooredFix v1.92 by jpshortstuff
Log created at 00:33 on 11/05/2009 running Option #2 (PeterD)
Firefox version...

Sorry, I didn't mean to sound rude. I totally understand why I needed to uninstall them. If they're screwing my computer up I don't want them on there anyway. :)

Anyway, here's the text file that...

Ah, you're probably thinking I got infected as a result of some P2P program.

Well, I haven't really used any P2P stuff recently. I guess I used bittorrent about 2 months ago. I didn't think...

I know I'm not supposed to double reply in a row, but I had one of those weird redirects just now and I've tried to more carefully document exactly what is going on.

I did a google search.
I...

Not sure if it makes any difference, but I installed emule myself about.... a year or two ago. I don't think I've used it since then really, but I've uninstalled it none the less.

As for...

Thanks for waiting, here's the full list:

Add or Remove Adobe Creative Suite 3 Master Collection
Adobe After Effects CS3
Adobe After Effects CS3 Presets
Adobe After Effects CS3 Template...

Is it possible for me to put this on hold for 1 week?

I have been shipped out of town for the week and I do not have access to my PC till the 10th.

So, could this thread remain open till that...

HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:57:58 PM, on 5/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot...

Okie Dokie, I did the drag and drop thing. It looks like it did the exact same thing as last time. Hopefully nothing messed up.

ComboFix Log:

ComboFix 09-05-02.4 - PeterD 05/03/2009 13:44.2 -...

ComboFix 09-05-02.4 - PeterD 05/02/2009 18:02.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1281 [GMT -4:00]
Running from: c:\downloads\ComboFix.exe
AV: AVG...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:19:42 PM, on 5/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
...

Thanks for helping me!

Ok, I did that stuff and I've attached both my log files.

I apologize for any past offenses I may have committed, but....

I'm running AVG antivirus, PCTools Spyware Doctor, and ZoneAlarm.... but for whatever reason, every now and then when I click a...

Ok, I'm running AVG antivirus, PCTools Spyware Doctor, and ZoneAlarm.... but for whatever reason, every now and then when I click a search result in google (could be a wikipedia page or whatever) I...

Thanks.

If I load Knoppix, and use Kaspersky to scan all my hard drives and USB drive, then delete all exe, dll, scr, html, asp.... etc files, I should be safe to backup anything else to my usb drive?
...

I guess depending on your response my follow-up question might be:

How can I safely backup my files without compromising my current archives. How can I be sure that anything I want to archive is...

Ooh, well that sucks.

Do I really have no other options? AVG made a custom application to remove Virut and it reported to have cleaned around 1200 infections.

Now, if I run the tool again I get...

Well, I've finally reached a point where I think I'm ready to connect my PC back to the net, which means I'll be able to follow standard advice.

If you want the full background on what I've been...

Woohoo, ok, this is a bit unorthodox, but after running scan after scan via the task manager I decided I'd end every task I could possibly end then try to start explorer.exe. Bam, my desktop shows up...

Ok, latest news:

DrWebCureIt and AVG rmVirut seem to have thoroughly cleaned through everything. I double scanned with both, they are now clean (after they cleaned like... 1100 files on the first...

As DrWeb CureIT running off of BartPE powers away at my poor hard drives I have to say this is the first relief I've had in a while.

DrWeb is eating Win32.Virut.56 for breakfast, oh and as a...

Well a few web searches have indicated that if it says I have win32.virut I am in deep...

Apparently it DOES kill all your executables. I'm following the recommended action to first use Dr...

Here's an update on what went on with my boot-up Avast Scan:

- bad things

Basically all my small executable files are showing up as virus'. Win32:Vitro to be exact.

I don't quite trust the...

Quick update so you guys don't waste time with my old situations:

Windows keeps telling me that my DVD driver isn't compatible and it wants to upgrade it, I ignore this.

Avast tells me I have...

Update:

Not sure if I did the right thing here, but an expert recommended that I backup my documents and settings folder and go ahead with the SP3 repair install.

During the install windows...

Oh mighty malware guru's, I come to you yet again for your advice.

Background:
I'm running XP SP3, AVG Antivirus 8.0, and ZoneAlarm.
The other day my antivirus pops up telling me that horrible...

Here's an update:

I was able to run Knoppix Live DVD. I can mount and view files on my primary and secondary hard drives. Now, it randomly allows me to view files on my primary hard drive for...

Ok, this is frustrating. Yesterday I noticed my computer was running poorly when I was using my C compiler, anyway, my compilation environment crashed, and even on restart wouldn't run, so I...

I currently use the Windows Firewall.

I've tried using Outpost as well and I have the same problem.

I just won't use a firewall I guess.

Thanks for all your help Mr_JAk3, you've helped me salvage that PC once again!

Sorry for taking so long to reply. Yes, I have granted full access to svchost. Nothing seems to be blocked, I have followed the tutorial and I still am unable to use the internet with ZoneAlarm...

I'm not sure if I've noticed it before or not. I don't usually try to start that computer in safe mode.

I guess it's not really that big a deal anyway. We can drop that issue I guess.

Now all I...

Ok, I replaced mup.sys and I still have the problem where I can't boot into safe mode.

Also, for some reason, I cannot add to or replace my hosts file. The file does not appear to be write...

Alright, got my drive replaced with Acronis, good software. Works great.

Now to try that dll thing.

Ok, I'll try that out, but before I can do that I think I'm going to have to get the HDD replaced.

It's started to make a high pitched sound which I'm guessing means it's going to fail any minute...

Here's the report:

C:\WINDOWS\system32\drivers\mup.sys
C:\WINDOWS\system32\dllcache\mup.sys
C:\WINDOWS\$NtServicePackUninstall$\mup.sys
C:\WINDOWS\ServicePackFiles\i386\mup.sys

Which of the listed firewalls do you recommend?

I'm trying to use Outpost right now, and when I have it set to "rules wizard" it blocks everything and I can't even access normal webpages.
If I...

I would like to fix the boot problem if it's not too much trouble.

About the Firewall, I installed Outpost Firewall and it's running as we speak. It should have been installed prior to that scan...

The computer seems to be running fine now!

I just can't boot into safe mode, I think that has something to do with it's OEM install of Windows though.

Thanks for all your help!
I would have...

I accidently set the tracking cookies to "delete" instead of quarantine.

I hope this is ok. Also, it looks like a lot more is in that report than what the results showed.

Here's the report:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 4:57:25 PM...

I installed outpost sucessfully. Some adpupdate keeps trying to run, whatever that is, I have it disabled for now.

I have tried to start in safe mode. After mup.sys loads (the last driver I...

Hey, IE is working now and I am able to run Windows update sucessfully!

This is great! Well, I'll be staying tuned for your advise just incase my problem is just crippled and not defeated.
...

Ok, at first neither HijackThis or CureIt could run. I think I found out why though. Dr Web gave me an error that it couldn't make some folder in the temp directory. So, I emptied my...