Malware/Virus/Trojan problems

Hi guys

About a week ago I was surfing the net and a pop-up for some casino related website came up, then all of a sudden a bogus anti-virus program came up saying that my computer was infected and I needed to purchase their anti-virus software. I also had a windows pop-up saying I had the skynet worm virus, so I researched around a few forums to try and get rid of it - I used the smitfraudfix application, and that seemed to stop all the pop-ups from coming up, however I have since become more conscious that my computer is probably full of other malware/trojans as any anti-virus programs (e.g. Spyboy Search and Destroy) that I try to download just don't start at all, or if they do start-up then they just stop scanning after a few seconds - something I believe that Malware interrupts? My Microsoft Security Essentials also flags up an error (error code: 0x800106ba) when I try to run a quick or full scan.

I'm running Windows XP 32-bit with no additional anti-virus software other than MSE.

This afternoon I have followed all the stages in the Read Me & Run Me and cleansing procedure and found the following results:

SAS - started scanning but then the program terminated after around five minutes. In that time two trojan files were detected (trojan.dropper/svchost-fake) - one in the memory items and one in the file items. As suggested in the guide, I then restarted SAS and unchecked the two kernel settings and this time the scan lasted around ten minutes before the program terminated (the results showing no other trojans/virus/malware than the two previously mentioned).

Malwarebytes Anti-Malware - installed this and downloaded updates however the program terminated after 10 seconds.

Combofix - when I opened Combofix the greenbar went all the way to the end, an hourglass appeared for a couple of seconds then nothing happened. Again, it seems like the program just terminated (a bit of a recurring theme here!).

The RootRepeal did manage to run properly and it flagged up three potential problems (see log attached).

Finally, MGtools also ran successfully (see log attached).


I know your job would have been made easier if I was able to complete and attach all the logs, but unfortunately my computer isn't playing ball at the moment. If there is any further information that I can provide then please don't hesitate to ask, and ANY help or assistance what-so-ever from any of you guys would be massively appreciated.

Thanks in advance.
Danny

 

Hi Tim

thanks for your reply. I have attached the log file to this message (I hope I did this right - there was no option in the drop down list to save as a txt file). The results did show three viruses that came up and deleted.

Are you aware of any problems that the 'trojan.dropper/svchost-fake' trojan (that the SAS identified) may cause? Is there a recommended way to get rid of this too?

Thanks again in advance for all your help and support.

 

Thanks again for your advice. I toggled the system restore on/off and quarantined & deleted the trojan.dropper/svchost-fake virus using SAS, however when I reboot the virus is still there - do you have any suggestions to permanently remove it?
Thanks,
Danny

 

Hi
SAS just shuts down after running the scan after around five minutes or so, so I stopped the scan after around 45 seconds after it has detected the trojan - attached is the log file from it. I have attempted to quarantine and delete it twice now, but when I reboot it is still there.

 

Hi again. Not to worry - it is my own fault for not having adequate protection really. Thank you again for all your help and support on this - you guys do some fantastic work and hopefully one day you will find a solution to this particular infection.
Cheers, Danny.