critical system warning + trojans .. help !!

andy2004

pennymakespounds wrote: »

andy , sorry .. don't know how to physically make those changes ?

Which is why I wrote this: slight edit as it didnt post the name of the program.

http://technet.microsoft.com/en-us/s.../bb963902.aspx Autoruns <a nice a simple way to stop things without harming the computer. remove tick turns it off. replace tick turns it on.
run it, and click LOGON tab <this is everything that loads when booting the computer, remove the ticks to programs you dont want to load at boot time.
then go to SERVICES tab <this can a bit confusing, i suggest a visit to http://www.blackviper.com/WinXP/servicecfg.htm for which services are safe to turn off, and which should be set to manual. Turning to manual basically means if the computer needs to run the it can if it doesnt require them they wont be started, disabled means it wont be able to run them, remember to do a system restore before doing this one in case you make a booboo.

pennymakespounds

browntoa . thanks

aol ----yes

pennymakespounds

Ali En Rik ... i'd run the couple of big ones as requested .. and as i posted , the next morning everything was peaceful .. and haven't done the others yet .. have been away a few days , just back on the case now.

pennymakespounds

ASK toolbar .. what / where are these ? .. what do i have to do ?

On spybot .. can't see anything about turning off Tea Timer ?


malaware log ...

Malwarebytes' Anti-Malware 1.38
Database version: 2414
Windows 5.1.2600 Service Pack 3
13/07/2009 10:10:20
mbam-log-2009-07-13 (10-10-20).txt
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 167339
Time elapsed: 48 minute(s), 19 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)

aliEnRIK

pennymakespounds wrote: »

ASK toolbar .. what / where are these ? .. what do i have to do ?

On spybot .. can't see anything about turning off Tea Timer ?

I gave step by step instructions in post #10 for turning off 'tea timer'

UNINSTALL (Goto 'add/remove programs') ~
ASK TOOLBAR (Might be called 'ASKBARDIS')
ZONEALARM SPYBLOCKER (Which is ALSO the ask toolbar in disguise!)

(Make sure you dont uninstall ZONEALARM FIREWALL by mistake)

justpaper

pennymakespounds wrote: »

justpaper

dell desktop
windows xp home sp3
intel cpu 2140
1.6gh
1gb ram

seems like a ok spec,. taking on that you have AOL running and a few adware spybot programs it would be running a bit slow,

On a Final clean up I think you should run combofix with your ad ware malware anitvuris and firewall programs all off, and disconnected from the internet, here is the guide for combofix http://www.bleepingcomputer.com/combofix/how-to-use-combofix

this will only take 10mins (ish) and at the end if will tell you if its clean or not,

and use on of the big name online AV scans, F-secure / kaspersky / bitdefender

removing rootkits is a long process of jumper thru hoops, but it beats formating

side note:

If you bank with barclays and have online account they are offering kaspersky for 12 months to be used on 3 pcs for free, http://www.personal.barclays.co.uk/BRC1/jsp/brccontrol?site=pfs&task=homefreegroup&value=10662