Cant go to malware/spyware/microsoft sites possible VIRUT

todkbear · Jun 20, 2009

When Windows starts I get a notice that "commandservice.exe" had to terminate. Then I get an alarm from my firewall that "\??\c:\system32\winlogon.exe" is trying to access the net. When I try to open IE7 it just closes immediately. I can get to the web via Firefox, but I can not go to certain sites (anything that has to do with spyware, malware, trojan). This has made it near impossible to update certain virus/malwware scanning apps.

I have tried numerous virus scans and have come up with different viruses that have been removed according to the scans, yet the problems still continue to exists.
I ran all the steps in Read Me.... with no luck. I tried to run ComboFix but it said that it is corrupt and that I may Virut (I hope not). When I ran MGTools I got error type 4, but couldn't get to the microsoft support page. The program said it was complete and created log files, but I do not know if they are in fact complete

Some of the applications I have tried are Spybot S&D, StopZILLA, Malbytes Anti-Malware, Norton AntiVirus Corp Ed, Malware Sweeper, and Avanquest SystemSuite. They all found something different, if they found anything.

Some of the things that these apps have told me I have (and claimed to have cleaned)" Haxdoor trojan, UACD trojan, MALPAK.D virus, Win32.DELF.UC virus, BKDR_TIDIES.XS threat

Thanks in advance.

TimW · Jun 20, 2009

I am going to save you the time of waiting for your turn to come up.

IMPORTANT NOTE: Some if not many, of your Windows system files are infected. And many other non-Windows files could also be infected. Even if we attempt to fix these problems (which may not be easy to do unless you have an original Windows XP SP3 bootable CD), your system may be unreliable and untrustworthy.You may need to reinstall this system.

Your logs show that your Windows Operating system files have become infected and there is no known reliable fix for this. In addition there are many many other infected files. We could spend a lot of time trying to remove this infection, but odds are that it will not work because the nature of the infection has so many executable system files infected that as soon as we fix one file, other files that are infected will almost immediately or upon the next reboot, just reinfect the files. In addition, your PC would still basically be unreliable/untrustworthy even if we manage to fix the infected files that we can see since there could be many more that we are not seeing.

The safest thing for you to do is backup your personal data immediately since your PC could possible become unbootable at any point in time. Do not back up any executable files. This includes programs that you have downloaded since any of them could be infected.

Once you backup, you need to perform a total reinstall of Windows and all other necessary software. DO NOT reinstall from any executable files you backed up because they are most likely infected.

todkbear · Jun 20, 2009

should I scrub all of my partitions or just the C: drive?

TimW · Jun 22, 2009

You should wipe all of it.

Log in or Sign up

Cant go to malware/spyware/microsoft sites possible VIRUT

todkbear Private E-2

Attached Files:

MGlogs.zip

hijackthis.log

SUPERAntiSpyware Scan Log - 06-20-2009 - 14-13-41.log

rrlog.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

todkbear Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member