PLEASE HELP! THIS PROBLEM HAS BEEN GOING ON FOR A MONTH!
Hi, I have a major problem! I seem to have gotten very badly infected, and nothing I do seems to help! I have a friend who is very good at this, and even doing what he has said so far hasn't helped. I have windows XP, emachines T3418. any other spec info you need just let me know.
Ok here's what has happened:
1. keyboard started acting weird.
2. computer started freezing
3. IE keeps popping up (even now, and I don't have IE anymore)
4. could not open spybot or advanced care.
5. Now I can only run in safe mode.
6. Doesn't recognize some of my drives
7. Cannot hear sound!
Ok, so now I have run a scan with AVG this is what it says:
AVG 8.5 Anti-Virus command line scanner
Copyright (c) 1992 - 2009 AVG Technologies
Program version 8.0.268, engine 8.0.285
Virus Database: Version 270.12.2/2072 2009-04-21
\\?\globalroot\systemroot\system32\UACxotndlto.dll Virus identified Win32/Cryptor
C:\WINDOWS\system32\svchost.exe (428) Virus identified Win32/Cryptor
\\?\globalroot\systemroot\system32\UACxotndlto.dll Virus identified Win32/Cryptor Object was moved to Virus Vault.
C:\WINDOWS\system32\svchost.exe (536) Virus identified Win32/Cryptor Object was moved to Virus Vault.
\\?\globalroot\systemroot\system32\UACxotndlto.dll Virus identified Win32/Cryptor Object was moved to Virus Vault.
C:\WINDOWS\system32\svchost.exe (576) Virus identified Win32/Cryptor Object was moved to Virus Vault.
\\?\globalroot\systemroot\system32\UACxotndlto.dll Virus identified Win32/Cryptor Object was moved to Virus Vault.
C:\Program Files\Internet Explorer\iexplore.exe (896) Virus identified Win32/Cryptor Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Locked file. Not tested.
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Locked file. Not tested.
C:\Documents and Settings\Administrator\NTUSER.DAT Locked file. Not tested.
C:\Documents and Settings\Administrator\ntuser.dat.LOG Locked file. Not tested.
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Locked file. Not tested.
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Locked file. Not tested.
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Locked file. Not tested.
C:\Documents and Settings\NetworkService\NTUSER.DAT Locked file. Not tested.
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Locked file. Not tested.
C:\Documents and Settings\Ramirez.BIANCA\Local Settings\Application Data\Mozilla\Firefox\Profiles\aeum9j4x.default\Cache(2)\1A0CAD09d01 Virus identified Win32/Cryptor.dropper Object was moved to Virus Vault.
C:\Documents and Settings\Ramirez.BIANCA\Local Settings\Temp\ovfsthxuwriqhpmpo.tmp Trojan horse Dropper.Generic.ALMG Object was moved to Virus Vault.
C:\pagefile.sys Locked file. Not tested.
C:\System Volume Information\ Locked file. Not tested.
C:\WINDOWS\pss\ChkDisk.dllStartup Trojan horse BackDoor.Generic11.HAM Object was moved to Virus Vault.
C:\WINDOWS\system32\autochk.dll Trojan horse BackDoor.Generic11.HAM Object was moved to Virus Vault.
C:\WINDOWS\system32\config\default Locked file. Not tested.
C:\WINDOWS\system32\config\default.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\SAM Locked file. Not tested.
C:\WINDOWS\system32\config\SAM.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\SECURITY Locked file. Not tested.
C:\WINDOWS\system32\config\SECURITY.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\software Locked file. Not tested.
C:\WINDOWS\system32\config\software.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\system Locked file. Not tested.
C:\WINDOWS\system32\config\system.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\systemprofile\protect.dll Trojan horse BackDoor.Generic11.HAM Object was moved to Virus Vault.
C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\ChkDisk.dll Trojan horse BackDoor.Generic11.HAM Object was moved to Virus Vault.
C:\WINDOWS\system32\fulewoge.exe Trojan horse BHO.IKM Object was moved to Virus Vault.
C:\WINDOWS\system32\galaduja.dll_old Trojan horse Generic13.HQS Object was moved to Virus Vault.
C:\WINDOWS\system32\jozoyona.dll_old Trojan horse Generic13.GVU Object was moved to Virus Vault.
C:\WINDOWS\system32\ligutafo.dll_old Trojan horse Generic13.EIA Object was moved to Virus Vault.
C:\WINDOWS\system32\nopayopa.dll.tmp Trojan horse SHeur2.ABJI Object was moved to Virus Vault.
C:\WINDOWS\system32\oembios.exe Locked file. Not tested.
C:\WINDOWS\system32\piyuzuju.dll.tmp Trojan horse SHeur2.ABJI Object was moved to Virus Vault.
C:\WINDOWS\system32\poinstall.exe Adware Generic3.KQH Object was moved to Virus Vault.
C:\WINDOWS\system32\rubelupe.dll Trojan horse Generic13.AAZN Object was moved to Virus Vault.
C:\WINDOWS\system32\sysproc64\sysproc32.sys Locked file. Not tested.
C:\WINDOWS\system32\sysproc64\sysproc86.sys Locked file. Not tested.
C:\WINDOWS\system32\tomewope.exe Trojan horse Vundo.GF Object was moved to Virus Vault.
C:\WINDOWS\system32\zomiduvi.dll.tmp Trojan horse SHeur2.ABJI Object was moved to Virus Vault.
C:\WINDOWS\Temp\160.tmp Trojan horse SHeur2.AABJ Object was moved to Virus Vault.
C:\WINDOWS\Temp\msb.dll Trojan horse BackDoor.Generic11.HAM Object was moved to Virus Vault.
------------------------------------------------------------
Objects scanned : 197930
Found infections : 25
Found PUPs : 1
Healed infections : 23
Healed PUPs : 1
Warnings : 0
------------------------------------------------------------
then I restarted my PC, still only allowed to enter Safe Mode I have done a registry clean with SpywareBlaster, MV RegClean 5.9, and CCleaner. All went smoothly except for CCleaner which will not finish its "run cleaner'' it get's to 98% and then stays there, never finishing. Sooo, after doing that restarted my pc...and still only safe mode. Also have a Hijack Report that I did before the AVG scan, so if you need that let me know.
Now before it got this bad I tried to get some help at another forum, that was about a month ago, and have not received any responses...so I beg PLEASE HELP!!!
The AVG report shows all the viruses/trojans that I have. They were saved to the vault even though I told it to '' clean automatically''
if you need any other info. let me know!!!:confused::(:o