Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: XP Antivirus 2008 Still In My System? Or Other Trojans?  (Read 10558 times)

0 Members and 1 Guest are viewing this topic.

fullbug

    Topic Starter


    Apprentice
  • Thanked: 1
    XP Antivirus 2008 Still In My System? Or Other Trojans?
    « on: August 20, 2008, 08:31:12 AM »
    I'm on a WIndows XP Pro Desktop, SP3
    Last week my girlfriend downloaded something, and it installed XP Antivirus 2008 on our system, what a nightmare, running Malwarebytes Anti-Malware it found about 50 trojans, or malware of some type, same thing with SuperAntiSpyware....
    I ran both of these programs in safe mode, using the guide found here: http://www.computerhope.com/forum/index.php/topic,46313.0.html

    Anyway, this program still seems to be around in some form or another, for example when I'm on google and do a search, and click on any result, it redirects me to some other website, usually some unknown search engine, or in some cases to a site that starts up another xp antivirus 2008 online scan, of course I kill that quick....
    I have run Malwarebytes Anti-Malware and SAS again, and it finds nothing, not sure what I can do from here....

    Also, this happens on any browser I use, but firefox is really bad, besides the search problem, I also get 'connection has timed out' or 'page cannot be displayed' 3 times out of 4....
    And alot of my desktop icons have disappeared....

    Suggestions, besides me wanting to throw my computer off my 6th floor balcony?


    Carbon Dudeoxide

    • Global Moderator

    • Mastermind
    • Thanked: 169
      • Yes
      • Yes
      • Yes
    • Certifications: List
    • Experience: Guru
    • OS: Mac OS
    Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
    « Reply #1 on: August 20, 2008, 08:33:36 AM »
    If you followed the guide to the letter, you should have posted the three logs.
    When you post them, we will be able to help you.

    fullbug

      Topic Starter


      Apprentice
    • Thanked: 1
      Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
      « Reply #2 on: August 20, 2008, 10:42:29 AM »
      Running the scans again, should be done soon....
      One problem though, since my desktop was fresh installed a few months ago, up until now I havent needed HJT, so I try to install earlier and get the following error....
      c:\documents and settings\administrator\desktop\hjtinstall.exe is not a valid win32 application

      I get this when I download any programs now and try to run them, so have no idea how I can even post the log....

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
      « Reply #3 on: August 20, 2008, 11:12:33 AM »
      Try installing it again after the SAS and MBAM scans are complete and the computer has been freshly restarted.

      If you can't get it to install let us know and we will use another tool.

      fullbug

        Topic Starter


        Apprentice
      • Thanked: 1
        Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
        « Reply #4 on: August 20, 2008, 11:49:29 AM »
        restarted -didnt do any good....

        Here are the logs


        [recovering disk space -- attachment deleted by admin]

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
        « Reply #5 on: August 20, 2008, 11:51:50 AM »
        Download ComboFix by sUBs from one of the below links. Be sure top save it to the Desktop.

        Link #1
        Link #2

        **Note:  It is important that it is saved directly to your Desktop

        Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.

        Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
         
        Double click combofix.exe & follow the prompts.
        When finished ComboFix will produce a log for you.
        Post the ComboFix log and a new HijackThis log in your next reply.

        Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

        Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.

        If you have problems with ComboFix usage, see How to use ComboFix

        fullbug

          Topic Starter


          Apprentice
        • Thanked: 1
          Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
          « Reply #6 on: August 20, 2008, 12:06:02 PM »
          I cant even download that from my desktop, whenever I go to the link I just get 'page cannot be displayed', tried a number of different links.... >:(
          I'm going to try emailing the program through my laptop to my desktop, not sure if that will work though.....
          Its weird how some sites will work and some dont....

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
          « Reply #7 on: August 20, 2008, 12:07:59 PM »
          Try this then see if you can download. You may need to restart the computer for it to take effect.

          Go to download the program HostsXpert
          • Unzip HostXpert to your Desktop
          • Open up the HostXpert program.
          • Make sure that the "Make Hosts Writable?" button in the upper right corner is enabled.
          • Click Create Back Up
          • Then click on Restore Microsoft's Host Files
          • Close the HostXpert program
          Note: if you use SpywareBlaster, Spybot and/or IE-SPYAD, it will be necessary to re-install the protection they afford. For SpywareBlaster, run the program and select Enable all protection. For Spybot run the program and select Immunize. For IE-SPYAD, run the batch file and reinstall the protection.

          fullbug

            Topic Starter


            Apprentice
          • Thanked: 1
            Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
            « Reply #8 on: August 20, 2008, 12:31:32 PM »
            Ok, I emailed myself ComboFix, but when trying to install I get 'Some installation files are corrupt. Please download a fresh copy and retry the installation.'
            I was able to download HostsXpert, but when unzipping with 7-zip I get the error 'cannot open file as archive.'
            This is not looking very good is it? This problem is far worse then I realized....
            Thanx for your help so far evilfantasy.....
            Should I run 'chkdsk' or something? I'm reaching I know....

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
            « Reply #9 on: August 20, 2008, 01:12:01 PM »
            Download Deckard's Association File Tool (DAFT) and save it to your desktop.
            • Rename daft.exe to daft.com and double click on it to run.
            • Read the disclaimer and click OK.
            • Click on the Scan button.
            • If it finds faulty file associations, they will appear in red beside a checkbox. If this occurs, just place a checkmark (tick) in the boxes in question.
            • Click the Fix button.
            .
            See if you can install anything now.

            You can try chkdsk, it can't hurt.

            fullbug

              Topic Starter


              Apprentice
            • Thanked: 1
              Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
              « Reply #10 on: August 20, 2008, 01:27:18 PM »
              I could only email the file, but the worked, ran it and it found 2 entries, fix them, but still can install anything, tried all the programs and the same errors came up....
              Next? ;D

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
              « Reply #11 on: August 20, 2008, 01:29:50 PM »
              Try chkdsk.

              Do you have an XP CD?

              fullbug

                Topic Starter


                Apprentice
              • Thanked: 1
                Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
                « Reply #12 on: August 20, 2008, 01:40:43 PM »
                Tried chkdsk, it didnt do anything....
                Yes, I have an XP CD, I'm hoping a reinstall wont be necessary....Mostly because the stuff I need to back up, I'm worried if I hook up my laptop to my desktop it might get infected too....That and its a royal pain to reinstall everything already there.....
                I gotta step out for an hour, but advice in the meantime would be great.... 8)
                Thanx again for the help.... 8)

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 493
                • Experience: Experienced
                • OS: Windows 11
                Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
                « Reply #13 on: August 20, 2008, 06:08:31 PM »
                Place XP CD ROM drive the and follow the instructions below:
                • Click on Start > Run and type sfc /scannow then press Enter (note the space between scf and /scannow)
                  • Let this run undisturbed until the window with the blue  progress bar goes away
                SFC - Which stands for System File Checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.

                If you want to see what was replaced, right-click My Computer and click on Manage.
                In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.

                fullbug

                  Topic Starter


                  Apprentice
                • Thanked: 1
                  Re: XP Antivirus 2008 Still In My System? Or Other Trojans?
                  « Reply #14 on: August 20, 2008, 06:50:40 PM »
                  We followed what you said and this window comes up. We do not know what to choose

                  1. Install Windows XP
                  2. Learn more about the setup process
                  3. Install optional Windows components
                  4. Perform additional tasks
                  5. Check system compatibility

                  Thanks