VIRUS HELP

I am using windows xp.
sony vaio, media center edition 2005

i am using avg8.5 and malwarebytes' anti malware.(not sure i should be running both at the same time).

This blue screen pops up, dont know what is says, flashes too quickly for me to read it. I run it on safe mode. I couldnt run the avg before, it would quit on me, but now its running all the way.

results of the scan from avg: 2 threats found "C:\WINDOWS\system32\drivers\ntfs.sys";"Virus identified Packed.Protector.C";"Object is white-listed (critical/system file that should not be removed)"

computer running slow,sometimes i can get on line, sometimes i cant. cant run internet explorer, downloaded firefox.


 

[attachment deleted by admin]

http://www.computerhope.com/forum/index.php/topic,46313.0.html

go to above , complete , post the 3 logs here an expert will see them

Please upgrade HJT to version 2.0.2 and create another log....

Thanks for the fast response. i have downloaded everything advised, waiting for scans to be completed to post logs.

Thanks

1.) SuperAntispyware
2.) Malwarebytes' Anti-Malware
3.) HJT log file


These three processes took hours, 7 maybe 8. When i needed to restart computer after downloads, it would restart, show start menu, background pic, but i couldn't do anything, i had to restart the computer a couple times to get it running.
AVG dropped my firewall, when i clicked on AVG to put the firewall back up, comp froze, had to restart.
Kept getting NTAUTHORITY/SYSTEM status code 107374819 warnings, system restarted 2 maybe 3 times.

while i was using malwarebytes and superantispyware AVG would show pop up alerts saying these files were virus.

Hope i've given enough details, if not, please let me know.

Thanks for the assistance and fast responses.
Fevah


[attachment deleted by admin]

Go the process tool, enter your HJT log and follow directions for cleaning.....http://www.computerhope.com/cgi-bin/process.pl

I followed all the steps given. Here's my new HJT log. Computer seems to be running as it should be. Ran Malwarebytes, clean. updated programs, I hope i did all this right.

Again, Karnac  thanks for the super fast response to my dilemma/*censored*/migraine. Hope it worked.

Hope I did it right.

[attachment deleted by admin]

AVG just ran its scheduled scan.

The virus C:\windows\system32\drivers\ntfs.sys Virus identified as Packed.Protector.C
(object white-listed[critical/system file that should not be removed])

still infected, and with about 20 other warnings. although computer seems to be running normal/everything working as should scans coming up infected.

Dont know if AVG is giving positive reads, it wasnt before.

Here's the link to the analysis of your HJT log.

http://www.computerhope.com/cgi-bin/process.pl?o=681547

Follow the directions for cleaning......

Yeah, no! Im not going to assume I know what im supposed to be doing because I dont. I dont understand what im supposed to do with

Verify your IE settings:

I understand everything after that.

Please forgive my ignorance, and thank you for your assistance and patience.

FEVAH

I don't have internet explorer to be able to check those settings.

[Malware Removal Specialist]

Fevah, it means exactly what it say.

Verify the below links correctly correspond to the web pages you want to be using. If these links are not recognizable it's possible your browser has been hijacked. To fix these settings check the corresponding boxes in the R0-R4 section.

If you're not getting the correct pages when you open and work with your IE, then you will have to fix some of these.

Dont know if AVG is giving positive reads, it wasnt before.

Perhaps you should also try another AV to keep AVG honest.

Try...

 http://evilfantasy.wordpress.com/bitdefender-rescue-usb/

Here's the new HJT log file.
Thank you all for pointing me in the right direction.

Fevah

[attachment deleted by admin]

So, here's the link for the process tool analysis of your HJT log.

http://www.computerhope.com/cgi-bin/process.pl?o=719649

Follow the directions for cleaning and you'll also have to use LSP fix for one of your entries.
Download LSP fix and hilite the file to remove on the left hand side and move it to the right hand side and remove it.
Any questions, just follow up