Host Process has stopped working/Explorer crash/Aero problems

[mcdidd]

Ok, I suppose it wouldn't do any harm. What's next?

[SuperDave]

Did you run the ComboFix script as described in Reply #27?

Please try this scanner.

Download the GMER Rootkit Scanner. Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised!

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.

• Click NO
  
• In the right panel, you will see a bunch of boxes that have been checked ... leave everything checked and ensure the Show all box is un-checked.
  
• Now click the Scan button.
• Once the scan is complete, you may receive another notice about rootkit activity.
• Click OK.
• GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
  
• Save it where you can easily find it, such as your desktop.

[mcdidd]

I ran the ComboFix script. I tried GMER Rootkit Scanner twice and I got the dreaded blue screen both times. I have a question. My computer is running Vista Home Premium, and I will be upgrading to Windows 7 Professional in a couple weeks (It must be a clean install, since the version I am upgrading to does not correspond to the version I have now), so should any problem that exists now be gone after the upgrade?

[SuperDave]

If you do a reformat and install the new OS you should be good to go.
To wipe the drive clean, reformat and reinstall the OS. Please read:
•When should I re-format? How should I reinstall?

[mcdidd]

I am planning on using Windows Easy Transfer before I install it. So will any threats be transfered as well?

[SuperDave]

You will be safer by doing a full wipe of your harddrive.

[mcdidd]

Ok. What is important to back up before I upgrade?

[SuperDave]

Backing up files before formatting

If you backup any files they should be scanned from a clean properly protected PC before restoring. Also be careful what scanner is used as some are very poor at detecting and even worse at protecting from this infection. In fact due to the nature of these new infections there are probably no tools that will properly protect you from the infection. Be very selective and only backup files you can not replace like text documents and personal photos.

Do not back up to another machine! It will likely become infected also. Burn to DVD/CD, a flash drive or to an external drive which has nothing else on it and which you can format should it become infected from the backups.

I suggest running at least 3 of the below scanners on the backup files. Run the first scan then reboot before running the second then reboot after the second before running the third.
 
-) Dr.Web CureIt!
-) AVG Win32/Virut Removal Tool
-) Symantwc W32.Virut Removal Tool
-) McAfee Avert Stinger
-) Microsoft Windows Malicious Software Removal Tool

If you do not know how to perform a fresh install, use this website -> www.windowsreinstall.com/