This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] antivirus xp2009

48 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

my son's computer (laptop #1) has been infected with the antivirus 2009.. he turned off the computer now the computer will not even let us log on. it says loading personal settings, then immediately logs off. How do i get past this? he is running xp Thanks muphouse this virus blocked me at every angle. it would not let me download any spyware, it would uninstall it automatically. I seem to be getting stopped at every move.. need a bigger brain than mine to figure this out.. i am trying to start in safe mode to see if i can get somewhere. it will not even allow me to start up in safe mode.. please help soon!! ok.. i keep waiting all must be busy. am doing things and will check back shortly. thanks
Can you get into safe mode ? If so download and run this analysis programme

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTScanit2 to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.
  • Close ALL OTHER PROGRAMS.
  • Open the OTScanit folder and double-click on OTScanit.exe to start the program.
  • Check the box that says Scan All Users
  • Check the Radio button for Rootkit check YES
  • Under Additional Scans check the following:
    • File - Lop Check
    • File - Purity Scan
    • Evnt - EventViewer Errors/Warnings (last 10)
  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post.

To attach a file, do the following:
  • Click Add Reply
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on [external image: Posted Image] to insert the attachment into your post
I am unable to log in using safe mode.. when i try to log in to the welcome screen it says loading personal settings then immediately goes to logging off. I have been uable to get past the welcome screen
The CD that came with his computer? Cannot find it I am going to look in a couple more places. But am not sure I will find it. The laptop is my sons, he is 21, and he does not remember where he put it. be back shortly. if you have another idea if i am unable to locate it??
no luck on restarting in last config that worked.. going to search for cd.. no luck in his cd.. have restore cd for my emachine.. and one for the gateway.. but none for the hp…
Is there a way we can just reformat the hard drive?? he only uses the computer for gaming.. i dont think there is much to be lost that he cannot get back later
Certainly - if there is nothing vital on there I would go for a full reformat instead of a repair What is the make of the laptop as it may have a recovery partition
pc recovery works by hitting the f11 key during startup so i hit the f11 key and it is reformatting.. but when it is done i would like to know what i should put on there to protect his computer! i dont believe he had anything running. maybe macafee.. i have been surfing through forums and have seen a lot of suggestions posted. but now with a clean slate maybe you can direct me to the right ones for him. when his computer is done reformatting i will try to get online with his so i can send you his files and get links directly…
OK first consideration mus be an antivirus

I will give you the download and installation instructions for the Antivirus I use, if at a later stage you do not like it I will also recommend several other free Antivirus programmes.

Please go HERE and download avast! 4 Home Edition to your desktop. Locate the file that you just downloaded, double-click on the file to launch the installation of avast!

Click Next on the avast! Setup window and on the next window with the ReadMe File.
Now you will see the Legal Agreement, just click I agree, and then click Next to continue.

You will be prompted with Configuration window, make sure that you choose Typical configuration and then click Next. Click Next to the windows that will follow, when the installation will finish, you will be given an option to schedule a boot time scan, select No

Now you have to restart your machine, select Restart and then click Finish.

After you restart you will get a message about avast! it will give you the general "Hello and Thank you for choosing our Product." Also after you restart you will notice 2 new icons in the bottom right corner of the screen.

VERY IMPORTANT - after restarting, right click on the @ in the taskbar and select Updating, then highlight and click Program.

You will get popup after its done updating. If avast! had to download anything for your computer you may get a message asking you to restart.

After you have updated avast! right click the small icon a in task bar and click Start Avast! AntiVirus

Click Program Registration and you will be taken to their website. Fill out the form and then check you e-mail. Once you get an e-mail from them (usually about 1 minute after submitting the form) copy and paste the serial they provided into the highlighted box. Then click ok.

After this, you will need to Schedule Boot-Time Scan with avast! Click on the little button placed up in the left corner, and select Schedule Boot-Time Scan. Read also this tutorial HERE it may make it easier to you to follow the steps.

Next, choose
  • Scan all local disks
  • scan archive files
  • click on Schedule
On the next dialog Operating system restart needed select Yes
Now avast! will restart your computer and start to scan before Windows fully loads.

IMPORTANT NOTE since your system had infections on it, avast! will give you dialog box with recommended actions, and options, please make sure if this happens, to click the Move to Chest button, and not to delete any reported files.

The boot log will be located here C:\Program Files\Alwil Software\Avast4\DATA\report\AswBoot.txt

Let me know how that goes and then I will secure the rest of his computer
it is running the scan and finding all kinds of things!! looks like my son not only got a virus, but an STD virus from some dirty porn!! Lots of Win32 : VunDrop and Win32 : Trojan-gen.. there are tons.. it says its at 9% starting to scan a little faster now.. been scanning for about 20 minutes.. its now 10:17 and its only 62% through the scan… will follow up tomorrow..
01/27/2009 21:37 Scan of all local drives Scanning aborted Number of searched folders: 565 Number of tested files: 2196 Number of infected files: 0 —————————————- 01/27/2009 20:10 Scan of all local drives File C:\Documents and Settings\Mark Uphouse\Desktop\SetupAntivirusXP.exe is infected by Win32:Trojan-gen {Other}, Deleted File C:\Documents and Settings\Mark Uphouse\Incomplete\Preview-T-72313433-Kobe Tai anal sex, her first time! Excellent.mpeg\ff_KobeTai01-a.mpg Error 42125 {ZIP archive is corrupted.} File C:\Documents and Settings\Mark Uphouse\Local Settings\Temp\mousehook.dll is infected by Win32:VunDrop [Drp], Deleted File C:\Documents and Settings\Mark Uphouse\Local Settings\Temp\ntdll64.dll is infected by Win32:VunDrop [Drp], Deleted File C:\Documents and Settings\Mark Uphouse\Local Settings\Temp\winvsnet.tmp is infected by Win32:Trojan-gen {Other}, Deleted File C:\Documents and Settings\Mark Uphouse\Local Settings\Temp\xamneocrsw.tmp is infected by Win32:Trojan-gen {Other}, Deleted File C:\Documents and Settings\Mark Uphouse\Temporary Internet Files\Content.IE5\CHEFCLEF\apstpldr.dll[1].htm is infected by Win32:Adware-gen [Adw], Deleted File C:\Program Files\Online Services\PeoplePC\ISP5900\Branding\ppal3ppc.exe\$INSTDIR\PPCToolbar.dll is infected by Win32:Adware-gen [Adw], Deleted File C:\System Volume Information\_restore{3A579F61-82CF-4117-919A-DB7B394CD5BC}\RP7\A0000352.exe is infected by Win32:Trojan-gen {Other}, Deleted File C:\System Volume Information\_restore{3A579F61-82CF-4117-919A-DB7B394CD5BC}\RP7\A0000353.dll is infected by Win32:VunDrop [Drp], Deleted File C:\System Volume Information\_restore{3A579F61-82CF-4117-919A-DB7B394CD5BC}\RP7\A0000354.dll is infected by Win32:VunDrop [Drp], Deleted File C:\System Volume Information\_restore{3A579F61-82CF-4117-919A-DB7B394CD5BC}\RP7\A0000355.exe\$INSTDIR\PPCToolbar.dll is infected by Win32:Adware-gen [Adw], Deleted File C:\WINDOWS\temp\mousehook.dll is infected by Win32:VunDrop [Drp], Deleted File C:\WINDOWS\temp\ntdll64.dll is infected by Win32:VunDrop [Drp], Deleted Number of searched folders: 11998 Number of tested files: 908076 Number of infected files: 13
here is the scan from this morning…. 01/28/2009 10:28 Scan of all local drives File C:\Documents and Settings\Mark Uphouse\Incomplete\Preview-T-72313433-Kobe Tai anal sex, her first time! Excellent.mpeg\ff_KobeTai01-a.mpg Error 42125 {ZIP archive is corrupted.} Number of searched folders: 12073 Number of tested files: 910107 Number of infected files: 0

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI