Avast malfunctions and maybe trojans!.

OK lets get rough then ;D

Download and Install Combofix

Download ComboFix from one of the following locations:

Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop *

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

Hi essexboy things I’ve been a long time away from my pc. Things got a bit worse. I tried to repair the antivirus when I tried I got an error message saying I should run full update. I did it and then I runed it it dectecte nothing and my disk continued loosing space I dont know why because I keep on geting rid of the garbage of my pc. And I got an alert message that said my copy of the software AVAST is pirated and will be deactivated. So as the system asked me to make space and the AVASt detected nothing and continued crushing I uninstaled it. ANd problems stilñl remains, the cursor moving alone and the disk getting filled up with I dont know what the hell this is. I continuously recieve alerts saying I am low in space. i am really pìssed off with the guy who hacked me!. So I’ll run the combo fix then I’ll write again.

Hi again I’ve run the combo fix after uninstaling an application I was not using because again when i tried to update my version of the software the instalation failed due to lack of disc space. Combo fix deleted a folder of windows and the pc is running a bit faster but the damned trojan is still here. Right now the cursor si moving without my intervention. Here is the link to the combo Fix log: http://www.mediafire.com/?ec49a45bwqx4hks

Is your mouse an optical one ?

  1. Close any open browsers.
  2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  3. Open notepad and copy/paste the text in the quotebox below into it:
File:: c:\windows\system32\drivers\YORKYDRV.sys

Driver::
YORKYDRV

Save this as CFScript.txt, in the same location as ComboFix.exe

http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

Refering to the picture above, drag CFScript into ComboFix.exeWhen finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

Hi essexboy My mouse is not optical. I had to completely uninstall the Avast. I’ll do that and the I write again.

Ok also could you attach the fresh combofix log after running the fix

Here is the log. And By the way, I have installed the Spybot, and a new version of the Avast. But i’m still in trouble. My disk keeps on loosing space, the recycle bin is corrupted. When the system tells me to get rid of programs I don’t use to make space I do and just minutes later I open my browser to check my facebook and woala! the disk is misteriously full again!. And my cursor still moves on its own. The spybot detected some spy software but not any trojan, and the avast could not analyse all the files due to that lack of space.
Damn!.

[b]367,48 Mb Total Physical Memory[/b] | 215,06 Mb Available Physical Memory | 58,52% Memory free 881,46 Mb Paging File | 388,91 Mb Available in Paging File | 44,12% Paging File free Paging file location(s): C:\pagefile.sys 552 1104 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 37,26 Gb Total Space | 0,48 Gb Free Space | 1,29% Space Free | Partition Type: NTFS

The main problem is that your hard drive is too small 40Gb means that about half your drive is taken up with windows and other essential programmes, leaving very little for temporary files from the internet surfing, space to unpack files to check for viruses and most importantly to defragment your disk. For everything to work smoothly you would ideally need 10% spare hardrive space (4Gb)

You are also well below the minimum RAM for XP I would recommend at least 1Gb

I can see no further malware on your system but it does need the above points to be actioned before it will start to run normally. +Do you have a lot of music/Photos on your computer that you could back up to a CD snd then we could try to resolve some of the problems

Yes there isn’t even enough free space to defrag your system (windows usually stats 15% free space required), which may help.

I would check how much space is allocated to system restore as I have seen that get above 1GB you need to reduce it to 1-2% (0.5GB ish) of the disk space maximum (Control Panel, System, System Restore tab). Then create a new restore point and clear out the old ones, which should free up some space.

####
Now you are clear of infection create a clean System Restore point:

  1. Click Start, All Programs, Accessories, System tools, System Restore.
  2. In the pop-up that appears fill in the radio button to Create a Restore Point
  3. Click NEXT
  4. Enter a useful name that you will remember if you need to find this again (Clean Restore Point)
  5. Click CREATE

You now have a clean restore point, you should clear the old ones:

  1. Click Start, All Programs, Accessories, System tools, Disk Clean Up
  2. Click OK on the C: drive
  3. Click the More Options tab
  4. In the System Restore section click the Clean Up button

Hi guys yes there is some malware here that remains undetected. My cursor still moves and selects things on the web pages I am reading on its own someone is certainly reading what I see. And I got rid of unneeded programs and temporary files, I do this frequently but I open my facebook page and out of nothing my disc runs out of space. The spybot also detected changes in the value of flash player I have blocked of course. This is not normal never happened to me before. This disk is new and is the first time I have this problem.