PC infected with win32: lighty-h [cryp], win32: vundrop [drp], apparently user was operating IE6 under Win2000 with Avast! 4.8 pro. Had to reboot in safe mode run Avast, rebooted to delete files. System will not properly normal boot, no desktop icons task bar, etc., only wallpaper and mouse cursor. The previous mentioned are displayed in safe mode. chkdsk/f find no errors. Also, ATI display drivers under device manager (in safe mode) are listed correctly, but when attempting to normal load desktop colour are only 4 bit. Any advise would be grateful.
I suggest:
- Clean your temporary files.
- Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
- Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
- Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
- Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
- Disable System Restore and then reenable it again.
- Immunize your system with SpywareBlaster.
- Check if you have insecure applications with Secunia Software Inspector.
- Update your video/monitor drivers.