help - virus, trojan and malware!! :(

rob250881 · Oct 12, 2008

I've recently reinstalled windows xp on this machine and its started acting weird again.
Searchs on google would go to http://go.google..... and then go to ad sites instead of the intended sites.
I can no longer access the windows update site as it says in the Windows Security Centre that windows update is turned off on my machine. I've gone to try and turn it on and it comes up with a message saying "We're sorry. The security centre could not update your Automatic Update settings...."
I've gone to the Automatic Updates tab in My Computer and it is showing Windows Update is turned on.
I've looked in services.msc and Automatic Updates was disabled, I tried starting that and it comes up with an error message.
Tried going to some websites with malware removal and the browser keeps saying connection timed out.

I have stopzilla installed and it keeps on finding the following files
TDSS trojan
VirtuMonde
Registration
Second Chance
however when that "deletes" them they still appear the next time I do a scan after re-booting machine.

Below is the Hijackthis thread.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:55:09, on 12/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

TimW · Oct 13, 2008

Welcome to Major Geeks!

Please uninstall HJT as it will be properly installed when you do the following:

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

READ & RUN ME FIRST. Malware Removal Guide

Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

Log in or Sign up

help - virus, trojan and malware!! :(

rob250881 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member