Hi,
I was asked to clean a virus on a laptop. The initial symptoms were Win7 very slow to load, no browser access to the web, no access to USB disk, unnamed processes running in Task Manager, eventually unable to do anything as the machine hangs.
Booted in Safe Mode with Command Prompt and found an unbelievable number of files and directories in c:\users\username\appdata\local\temp - literally 1000’s of directories and files. Deleted everything (del . /s/q) and did the same in c:\windows\temp. Rebooted. Computer slowly ground to a halt. Rebooted in Safe Mode and found the temp folders full of crap again.
Created an Avast rescue disk USB to boot the infected laptop. After the scan completed, Avast said it had found and cleaned two files MgicBrowserAddin.dll and tbPro1.dll in a Sony plugins folder and the files were infected with Win32: Malware-gen.
Rebooted. Reinfected. What to do now?
Thanks.