Will someone please take a look at the reports. We did a factory reinstall but saved all the user data file (photos, music) MS Essentials removed three severe threats after the fresh install, but the dvd will still not open and the hijack parser sees some questionable entry's.
Thanks
Sleven
**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.
Hello there, sLeven7
I'm Conspire, I'll be glad to help you with your computer problems.
Please observe these rules while we work:
Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.
Please bear with me, I will post back to you as soon as I can.
IMPORTANT NOTE : Please do not delete anything unless instructed to.
—————————————————————————————————
I would prefer and appreciate if you could paste the logs instead of attaching it in future for the ease of researching. Thank you
Please download GMER from one of the following locations, and save it to your desktop:
Main Mirror This version will download a randomly named file (Recommended)
Zip Mirror This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
Extract the contents of the zipped file to desktop (applicable only to Zip mirror) .
Double click [external image: Posted Image] or [external image: Posted Image] on your desktop.
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO. [external image: Posted Image]
[external image: Posted Image] Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following …
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in your reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
The program ran for several hours then it said it was restarting the computer, the computer than shutdown and rebooted. I did not give us a chance to save anything, should I rerun it?
I need you to try and check only both "Sections" and "C:\" ; leaving all others unchecked.
If that fails, please try to run it in Safe Mode and again with the same settings as above.
Reboot your computer in Safe Mode
If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Today XP started acting very strange. Task manager cpu line showed 15% use and in the processes it said 2%. Different programs were shutting off for no reason, and there were a few other issues.
We did a complete OS re-install, wiping out all the data except for photos and one program folder that was saved on DVD. After completely updating, optimizing, and installing MS Essentials security, we started transfering the content of the DVD back on the computer. Essentials caught a virus in one of the program files on the way in and destroyed it We used Piriforms defragler to completely defrag it after everything and she is running better than the day we bought it. After that we also made a small 12G partition and installed Linux Mint 9 xfce 32bit next to XP. We worked on cleaning up XP for 4 days straight. Linux Mint 9 took all of 30 minutes to install, configure, and add all the apps that were being used on XP, and had better benchmark scores, go figure. Thats where we should have started 4 days ago.
Thanks for the help Conspire, sorry to have wasted your time, wish my foresite was as keen as my hindsight.
We used Piriforms defragler to completely defrag it after everything and she is running better than the day we bought it. After that we also made a small 12G partition and installed Linux Mint 9 xfce 32bit next to XP. We worked on cleaning up XP for 4 days straight. Linux Mint 9 took all of 30 minutes to install, configure, and add all the apps that were being used on XP, and had better benchmark scores, go figure. Thats where we should have started 4 days ago.
Thanks for the help Conspire, sorry to have wasted your time, wish my foresite was as keen as my hindsight.