6 replies to this topic

[Biscuit]

Hi

Windows XP SP2

I had a very nasty virus to clean. I was unable to initially install any security software (even in safe mode) until I installed WinPatrol. I was then able to see a file with a random numeric name in startup from windows\system32 which I used Unlocker to delete. After that I was able to install MBAM. It found some nasties to delete & froze on the first attempt to remove. After awhile I crashed the pc & ran MBAM again - this time it deleted the malware. I then ran a full scan with MBAM & also Nod32 & PrevxEdge. HijackThis seems ok.

Everything seems fine now except that I cannot browse the Internet, Nod32 can use the Internet to update with no problem. I used a Winsock repair utility which had no effect. I uninstalled IE & Firefox & then reinstalled them with no effect. I set up a new user & the new user can't access the Internet. However running Safe mode with Networking, the Internet works fine.

Does anyone have any idea's please?

[Biscuit]

Oh, I've also fixed the hosts file.

[GT500]

Please follow these instructions (skipping any steps you are unable to complete) for posting in our Malware Removal - HijackThis Logs forum. If you cannot follow any of those steps, then please create a new topic in that forum explaining what happened when you tried to run each of the tools in the instructions, and the expert who helps you will be able to suggest steps to take to get the tools working.

[Biscuit]

Update

I've sorted the problem, it was caused by Nod32 version 4. I uninstalled Nod32 & Internet access worked perfectly. I cleaned the computer, reinstalled Nod32 v4 & Internet access fell to bits again. I cleaned again & installed Nod32 v2.7 & everything is now fine.

[GT500]

Biscuit said:

Update

I've sorted the problem, it was caused by Nod32 version 4. I uninstalled Nod32 & Internet access worked perfectly. I cleaned the computer, reinstalled Nod32 v4 & Internet access fell to bits again. I cleaned again & installed Nod32 v2.7 & everything is now fine.

That's weird. You may want to follow those instructions to have an expert go over your logs just to make sure nothing bad is there, as there could be something causing problems. Although, it's best not to do that if you are getting help from ESET's tech support for the issue. To many cooks spoil the soup.

[Biscuit]

GT500, on Mar 18 2009, 07:38 PM, said:

That's weird. You may want to follow those instructions to have an expert go over your logs just to make sure nothing bad is there, as there could be something causing problems. Although, it's best not to do that if you are getting help from ESET's tech support for the issue. To many cooks spoil the soup.

Thanks for your reply.

I'm happy that the computer is clean, it was Nod32 that was falling to bits. Version 4 can be a bit of a nightmare - Eset seems to be falling to bits these days.

[GT500]

Biscuit said:

I'm happy that the computer is clean, it was Nod32 that was falling to bits. Version 4 can be a bit of a nightmare - Eset seems to be falling to bits these days.

Sad, they used to be one of the best.