We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

I Reinstalled XP Due To Viruses......Still Having Problems

Associate
Associate Posts: 186 Forumite
edited 8 April 2010 at 1:20PM in Techie Stuff
Hi,

Due to my PC being infected with Trojans I ended up reinstalling XP.

I know I may have not followed all the correct procedure afterwards but heres what I did.........due to not having an A Virus on it I downloaded Malwarebytes AntiMalware from filehippo.com. I then tried to download Kasperky Internet Security 2010 from the Internet as I am entitled to it for free due to being a Barclays online customer. The page wouldn't load.

I can browse the internet without any problems but cannot go on the Kaspersky website. Just to make sure there was probably something wrong with their site, I did a google search for Norton, Mcafee and Windows Updates and their site wouldn't load up either!

For some reason Anti Virus websites and the Microsoft Updates site aren't loading up on my PC but all other websites can be browsed without any problems, here is the message I get on firefox:

The browser could not find the host server for the provided address.




* Did you make a mistake when typing the domain? (e.g. "ww.mozilla.org" instead of

"www.mozilla.org")


* Are you certain this domain address exists? Its registration may have expired.


* Are you unable to browse other sites? Check your network connection and DNS server settings.


* Is your computer or network protected by a firewall or proxy? Incorrect settings can interfere with Web browsing.


When I did a quick scan with Malwarebytes after I downloaded it and before trying to go on those Anti Virus websites and Microsoft Updates, it detected an infection which I deleted and Restarted the PC afterwards, here is the log:


Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3967

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

08/04/2010 12:28:18
mbam-log-2010-04-08 (12-28-18).txt

Scan type: Quick scan
Objects scanned: 98018
Time elapsed: 4 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


I have currently got Malwarebytes and Comodo Firewall (downloaded it after I couldn't get on the A Virus websites) installed on my PC.

Any ideas why I can't access those Anti Virus & Microsoft Update websites on my PC, but can browse web as normal apart from that?

Thank you.

Jay
«1

Comments

  • pagelad
    pagelad Posts: 32 Forumite
    I've found Microsoft Security Essentials does the trick with most viruses and trojans, its free as well to people with genuine copies of windows.

    Best bet for using it is to download the software and the definitions on a separate workstation then use a memory stick to install on the infected machine.

    I work as a Technician and have used it to clean countless machines
  • Check your router/modem settings are as per your provider.
  • Hintza
    Hintza Posts: 19,420 Forumite
    10,000 Posts Combo Breaker
    I have just spent a day sorting out a similar problem couldn't access any webpages via Chrome or IE8 but Firefox still worked. I have now got them both up and running again but I suspect it was when I downloaded SpyDoctor that the problems happened. I have now removed it.

    By the way why not try AVG 9?

    I got a bit lax and didn't do any spring cleaning for months.
  • dogmaryxx
    dogmaryxx Posts: 2,446 Forumite
    Part of the Furniture 1,000 Posts Name Dropper
    Update to IE8
  • Associate
    Associate Posts: 186 Forumite
    I think I'ver managed to resolve it......I scanned the PC with SuperAntiSpyware which found a virus called Trojan.Conficker/Variant, which along with other things prevents the PC from accessing Security sites. Here is the log:

    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 04/08/2010 at 05:13 PM

    Application Version : 4.35.1002

    Core Rules Database Version : 4744
    Trace Rules Database Version: 1978

    Scan type : Complete Scan
    Total Scan Time : 00:10:59

    Memory items scanned : 325
    Memory threats detected : 0
    Registry items scanned : 4732
    Registry threats detected : 0
    File items scanned : 10849
    File threats detected : 1

    Trojan.Conficker/Variant
    C:\WINDOWS\SYSTEM32\GUGPCNV.DLL



    Here is an article on it:http://news.cnet.com/faq-conficker-time-bomb-ticks-but-dont-expect-boom/

    Thank you!
  • puppet1984
    puppet1984 Posts: 125 Forumite
    Part of the Furniture 100 Posts Combo Breaker
    when you reinstalled windows did you do a clean install or just install over the top?
  • Associate
    Associate Posts: 186 Forumite
    My mate who owns the shop did the reinstall and says it was a clean installation.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Theres no way that the drive WASNT formatted if it was still infected.
    :idea:
  • DVardysShadow
    DVardysShadow Posts: 18,949 Forumite
    alienrik wrote: »
    theres no way that the drive WASNT formatted if it was still infected.
    WASN'T -> WAS

    random text to defeat decapitalisation
    Hi, we’ve had to remove your signature. If you’re not sure why please read the forum rules or email the forum team if you’re still unsure - MSE ForumTeam
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    WASN'T -> WAS

    random text to defeat decapitalisation

    correct (Minds not really on it today :p)
    :idea:
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 353.9K Banking & Borrowing
  • 254.3K Reduce Debt & Boost Income
  • 455.2K Spending & Discounts
  • 246.9K Work, Benefits & Business
  • 603.5K Mortgages, Homes & Bills
  • 178.3K Life & Family
  • 261.1K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.