In desperate need for help! ANYONE

Viruses and worms
1

Downloaded 4.8 free trial Avast! Using Windows XP SP2

Have ran Avast with boot scan and found two files with Trojan Gen (other)…on both times I deleted as they were with non-system files I never use.

On start up I ran avast scan and its detected SKYNET and UAV virus types.

The problem I am facing is I cant delete anything (the system wont work) and I cannot download anything as the internet has been disabled.
I would also do a complete Windows reinstall, however my Disk drive is broken and I cannot get my hands on a removable disk drive currently.

HELP?!

2

Do you mean Skynet and ’ UAC ’ ? Can you possibly download a program from another pc and transfer by flash drive. If so download Rootrepeal, this needs no installation.Just unzip,and double click, choose filesthen run the program, then copy/paste the log

http://rootrepeal.googlepages.com/

3

Running Rootrepeal, will copy and paste the log when complete.
Additionally I did mean UAC, my bad!

4

Rootrepeal has completed the scan and nothing has appeared so no report :S

Also during the scan my internet options reappeared.

5

When its finished, you should have a report http://www.malwarebytes.org/forums/index.php?showtopic=12709

Without the report,the scan means nothing. See the link for posting a report.Click ’ report’, then scan,then files,choose drive. Sorry my fault
Also if you have your internet back please download MalwareBytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/

6

There is no report, the file path, status thing is empty and yes it says DONE! as well.

I will download what you said.

Also my windows XP theme has returned. All getting a bit odd

  • 1min in with Malwarebytes software and 3 objects infected
7

Sorry,try again, open the program, click on report click on scan put a tick in the files box click ok then tick C, then the scan should run and produce a txt report, that you can copy/paste

No good with MBAM UNTIL rootkit removed.Please use Rootrepeal

8

Hope this helps.

Will Malwarebytes delete the infected objects its picked up?

9

Sorry that report is no good. The idea is to remove the rootkit with roootrepeal then mbam should clear the rest.Without removing the rootkit, the other files will keep returning, on reboot.Can you try another rootrepeal scan exactly how i said in my last post by clicking on the report tab first etc

10

Ok, have done the steps as said, sorry for error before. New report, I cant make heads or tails out of it, hope it helps!

11

Sorry it all scrambled, does it look like that before you post it ?

If for whatever reason, you are unable to post a report,I suggest you look for the file yourself.Open Rootrepeal, and choose files and scan. s.
Please read the link carefully http://www.malwarebytes.org/forums/index.php?showtopic=12709

The file you are looking for begins with one of the following, and ends in sys
TDSS
Seneka
GAOPDX
UAC
ovsft
kungsf
Skynet
MSIVX
hjgrui
wzszx
ESQUL
geyekr
vsfoce

In you case, probably UAC or Skynet, for example UACmxegjtve.sys or SKYNEToyfjtpeo.sys
The link provides advice how to identify and remove

Post back with any problems/results

12

The necessary steps to remove Win32:Alureon are quite simpler. I found this through trial and error. Install avast! home edition trial. Let it run its heuristic scan (I didn’t see an option to do this; it just ran itself. It found the virus’s drivers in the windows/system32 directory and wanted to do a boot-time scan. I let it reboot the PC and it found all the files associated with the virus and removed them. Problem solved, no more infection.

P.S. AVG detected but couldn’t remove the virus files, OneCare allowed it to infect my PC in the first place, and the various rootkit removal programs all hung on trying to scan the system32 directory.