Re: PL HELP!!!my system is infected with winavxxx and many more spywar

Hello Akshay Hari - I smell a rat here! (British colloquialism!)

I'm *not* a technical helper but I have been in a similar situation and come
here for help. The conundrum is knowing just who one can trust! :) I had
originally thought that this was a site operated by Microsoft and thus
beyond reproach, but that seems not to be the case. Literally *anyone* can
post here and, of course, purport to be something other than they really
are. I believe it to be a very dangerous place. Just my view.

You were given magnificent advice (or so it seems) by 'Kayman' - it may all
be absolutely correct.

However, the follow-up post is 'signed' by David H. Lipman - in this case
what is known as a 'bottom poster', with his response under the original one
from 'Kayman'. It appears, though, that a mistake has been made. Even though
that second post was supposed to be from Mr Lipman, it appears that the
poster was the very same 'Kayman' - both the name used in 'From'
............... and the IP address (203.172.37.194) ........... are the same.

Perhaps there is a simple explanation. Comments from others here might help.

I do note that you personally didn't mention using System Restore. Have you
used it? (Start/All Programs/Accessories/System Tools/System Restore)

Perhaps worth a try if you haven't. Hope this helps!

BD

**********************************************************************

"Dr. X...The X Factor" <Dr. X...The X Factor@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message news:0231F3D6-FB53-4CA5-9622-3777696FB707@xxxxxxxxxxxxxxxx
I have a HP Compaq nx7010 running Windows XP Home Edition SP2. I was
browsing
the web searching for a medicine properties and I guess it was when the
virus
entered my computer. It has been almost 2 weeks now. The virus was
(or is) a Trojan, it appeared as a yellow triangle with "!" sign in the
middle resembling windows alerts; alerting me of potential spyware action.
Minutes later a pop-up appeared and if I click on it (which I did by
mistake,
was chatting and hit the enter key when it poped-up) it will re-direct me
to
a home page which I never used. I also got my homepage changed (hijacked)
to
google.
I had tried various anti-virus softwares (Norton, AVG, McAfee) and it
didn't
detect the Trojan nor it avoided its entrance. Now I have Avast.
I have tried many things to kill the virus and work normally but I have
not
been successful. I downloaded SPYNOMORE (by that time I was aware of the
Trojan and its big power), I had to re-start my computer and then all got
worse.
When I started in Safe Mode, I was not able to see the Control Panel icon
anymore.
I tried to uninstall the SPYNOMORE but it didn't let me do it since I was
working in Safe Mode. Finally I downloaded SPYBOT SEARCH&DESTROY, and run
it.
It found many undesirable files and removed them. Same
thing with SPYWARE TERMINATOR, it found many problems and claimed it had
solved them.
But it did not. The system was still working slow with the same pop ups
and
yellow triangle when I tried to start
in Normal Mode and the Control Panel was no-where.
Just to check, I tried to Run-- regedit, but it says that it has been
disabled by my administrator. Also it has appeared a few times a popup
indicating that I have "restrictions" in this computer.
Same with Task Manager and many other things too!!
Another "intersting" thing that I noticed was when I was re-starting the
computer in Safe Mode, I saw that the lines read Partition2, and this
computer (hard drive) is not partitioned!

I read many similar problems on the internet on various forums with many
people suggesting many methods of removal...but i dont want to try
something
myself and worsen my system's condition.
I get error message saying "Contact your system administrator or technical
support group for further
assistance"
And that is what I am doing, asking for HELP from microsoft's technical
support. I think I have made the most before posting this here, so if
anyone
with knowledge about this problem can help me, I will be very happy.
Thank you so much in advance.

Akshay Hari


.

Relevant Pages

  • Re: PL HELP!!!my system is infected with winavxxx and many more spywar
    ... You were given magnificent advice by 'Kayman' - it may all be absolutely correct. ... the web searching for a medicine properties and I guess it was when the virus ... detect the Trojan nor it avoided its entrance. ... When I started in Safe Mode, I was not able to see the Control Panel icon ...
    (microsoft.public.security.virus)
  • HookerDll.dll
    ... >virus scan has detected this file as a Trojan. ... Re-start in safe mode and scan again. ... I tried this but it would not resolve it. ...
    (microsoft.public.security.virus)
  • Re: Virus infection help needed
    ... > registry that Symantec says it creates but still the virus is there.... ... you have a trojan, ... Reboot in safe mode and run a scan again. ...
    (alt.sys.pc-clone.dell)
  • trojans
    ... The best way to get rid of a virus is to start your ... machine in safe mode and run a complete virus scan. ... >My anti-virus popped up stating that it found a trojan ... >these are suspect programs is there a way to quarintine ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Bloodhound.exploit.6 Trojan
    ... It is not clear to me that you have removed this virus. ... What does it mean when it said in Regedit Default REG_SZ no value set ... Each and every key in the registry has a single default ... How can I get my computer to go into safe mode? ...
    (microsoft.public.security.virus)