Trojan caused by XP Security Centre & Other Issues + Laptop Question

Andy._5

Previously posted another Forum and recommended to come here.

Basically the other week I got this XP Security Centre Tool 2010 (Security Centre) popping up and scanning my computer telling me their was 30+ infected files. I had never seen it before and it is located in Control Panel (switch to category view). So I ran AVG 9.0 and it picked up nothing. Was told to get Malware Bytes and it found a few registry errors. So problem went away, then today the same problem.

I read into it on this site and its a Virus that installs its self on your computer, tries to make you buy the Security Tool which then proceeds to steal your credit card details. I've located the two processes which trigger the Virus Scan to pop up. Their called;

ave.exe and CDF.exe

Now I've been told to run STOPzilla to see if this helps. I was wondering if anyone on here knows how to execute these two "exe" files on startup. If they didn't trigger on startup, I wouldn't have these problems. Also trying to locate where their starting from.

I finally ran ComboFix and got this removed. However the problems keep occuring and now another one I have came across called "Your Protection". It's not a major one but it starts up everytime on Start-up even when I turn it off via "msconfig". So all was fine, then yesterday the computer kept giving me "blue screen of death". I couldn't get a chance to read it cause it shows it literally for one second then restarts. Only way I can get in is via Safe Mode with Networking.

I tried to use another OS Disc but it won't boot either. Could be the disc, so going to try another one tomorrow when I get it.

Any suggestions?

---

Also, looking to get a Laptop this week as I am getting Wireless installed at the weekend. Will probably get rid off the computer when I fix it too. Anyways, I don't want to spend anymore than £300 for a laptop. It will be used just for Website browsing, Photoshop work really. Will be buying an external HDD to store all my work on it, therefore it doesn't take up room on the Laptop HDD. Anywhere online like good websites you would recommend to get from and what laptop?

Thanks in advance for those who help.

rhythmsoup

Andy. wrote: »

I tried to use another OS Disc but it won't boot either. Could be the disc, so going to try another one tomorrow when I get it.

Any suggestions?

Did you try burning and booting with a Linux Live CD? That should get you going and be a good way to get round your Windows problems. If you dont have any data on there you need Id just wipe the machine and install Ubuntu Linux and put an end to your malware problems once and for all.

Dont chuck in your old machine just yet, give it a try, you've nothing to lose.

RussJK

These are non-specific approaches you might take if a straight-forward scan fails:

1/ Try safe mode with networking and use malwarebytes antimalware (you prolly have already done this)
2/ try some of these from http://www.pendriveapps.com/software/portable-antispyware-malware/
3/ try the Microsoft post infection scanner (http://onecare.live.com/site/en-us/default.htm)

If not, you can take other measures:
4/ Make an anti-malware LiveCD - boot your computer from a CD with antivirus/antimalware programs on it, in no particular order:
a. Kapersky Live CD (http://ftp.kaspersky.com/devbuilds/RescueDisk/)
b. F-Secure Rescue CD (http://www.f-secure.com/linux-weblog/)
c. Dr Web LiveCD (http://www.freedrweb.com/livecd) *freezes for me
d. Using many Linux distro CDs (http://njlinux.blogspot.com/2008/01/virus-scan-windows-using-linux-live-cd.html) *old post but gives you the general idea
e. Hiren's Boot CD contains MBAM and many other antimalware programs (I won't link due to software copyright violations);
f. HawkPE lets you start in the pre-windows environment and run antimalware (won't link due to same reason);
g. Ultimate Boot CD
You can also many of the the above with USB disks, using UNETBOOTIN, but if you have an active virus then it might alter the files. I'm thinking that the .iso files used to burn a CD should be safe, unless you have a program active that treats .iso files like folders. If you have another (virus free) computer to burn the LiveCD with, then that would be more ideal though.

5. Scan your harddrive with another computer
a. If you have other computers on a (safe) local network, then you could share the entire hard drive and let another computer on the network do a remote scan. I last used this method more than ten years ago, but should work today. You may have to "map network drive" with the other computer.
b. If the above proves is impossible, then you can take out your HDD out (easier if it is a desktop computer) and put it in an external casing/caddy and scan the contents with another computer. Obviously make sure that the other computer has a decent antivirus active so you don't just end up with two infected computers;

enigma52

try the Dr Web live cd first

Andy._5

Thanks guys, I'll give it a try.

pupmaster

Spybot search and destroy ( free )

Linbox

http://forums.moneysavingexpert.com/showpost.html?p=31881347&postcount=215