Many Problems

MarianneLena · Feb 21, 2006

Hi!
I hope posting this will bring around some help...I've been ignoring the problem for a couple of months now and the problem is getting worse. I initially had the winfixer pop-ups (plus adult friend-finder pop-ups, etc.). I downloaded Ad-aware, Microsoft Anti-Spyware, and I subscribed to Norton. None of these things fixed the problem. I took Ad-Aware off my computer for a month, but then I downloaded it again yesterday. I started the system scan. 20 seconds into the scan Windows shut down - I got a blue screen with an error message on it. I've tried it a couple of times since then and it still does that. What can I do to fix this problem and get my computer back to normal? Thanks for the help!!

chaslang · Feb 21, 2006

Welcome to MGs!

Run the steps in the below link:

Virtumonde aka Trojan Vundo Removal

Make sure you attach the log from VundoFix.

MarianneLena · Feb 21, 2006

Thanks for helping me out!

Here is the log as requested:

VundoFix V4.2.26
Scan started at 10:18:39 PM 2/21/2006

Listing files found while scanning....

C:\WINDOWS\system32\xxywt.dll
C:\WINDOWS\system32\twyxx.ini
C:\WINDOWS\system32\twyxx.bak2
C:\WINDOWS\system32\twyxx.ini2
C:\WINDOWS\system32\twyxx.tmp

C:\WINDOWS\system32\twyxx.ini2
C:\WINDOWS\system32\twyxx.bak2
C:\WINDOWS\system32\twyxx.tmp
C:\WINDOWS\system32\twyxx.ini
C:\WINDOWS\system32\twyxx.ini2
C:\WINDOWS\system32\xxywt.dll
Attempting to delete C:\WINDOWS\system32\xxywt.dll
C:\WINDOWS\system32\xxywt.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\twyxx.ini
C:\WINDOWS\system32\twyxx.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\twyxx.bak2
C:\WINDOWS\system32\twyxx.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\twyxx.ini2
C:\WINDOWS\system32\twyxx.ini2 Has been deleted!

Attempting to delete C:\WINDOWS\system32\twyxx.tmp
C:\WINDOWS\system32\twyxx.tmp Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V4.2.26
Scan started at 10:23:02 PM 2/21/2006

Listing files found while scanning....

No infected files were found.

chaslang · Feb 22, 2006

Okay that looks like if fixed your Vundo (aka Winfixer) problems. Please remember to attach logs and not post them inline with your messages.

Are you still having any malware problems? If not would you like to check to make sure there are no other hidden problems you are not seeing. If so, continue with the below.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

.

Log in or Sign up

Many Problems

MarianneLena Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

MarianneLena Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member