Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
This topic is locked
Well i got a virus on my desktop (Windows XP) yesterday as i was browsing dog food for german sheppard puppies. I believe the virus was from downloaded in background without my consent. The problem is now, I have a heap of problems and i can only list them in a hope someone can help or recognise what this is and how to fix it.
Firstly when i log into my account, i receive this message:
"fxssvc.exe - Application Error
The instruction at "0x01031eb6" referenced memory at "0xffffffff". The memory could not be "read".
Click on OK to terminate the program
Click on CANCEL to debug the program"
Pressing OK, CANCEL or the X in the corner all have the same result (the box just dissappears and nothing happens.) I'm not sure if this is a major issue or if it is connected to the malware. When i'm logged in an error message also occurs that says "Application launcher Unable to load configuration [OK].
Secondly, "Spyware protect 2009" (obvious spyware itself) pops up with the "Windows Security Alert". I know this is spyware, but removing it is the third problem! It also makes a blank white box appear in the bottom right hand corner of my screen stating "Attack from: 156.22.88.194, port 8670. Attacked port: 56043. Threat: BankerFox.A". It occasionally changes numbers and what the 'threat' is, although i know it's spyware protect because if I right click and select properties, it's address is: kaka://C:\WINDOWS\sysguard.exe/netalert.htm
I believe sysguard.exe is spyware 2009 because when i end it as the process in task manager, spyware 2009 dissappears.
Thirdly, Whenever I attempt to open windows security center or windows firewall, in fact most of the programs in CONTROL PANEL do not open when i double click or select open. The mouse turns into the timer for about 2 seconds then back into the mouse and nothing happens. Even to get to the control panel i have to change the properties of the start bar by making "control panel: show as link YES" selected, even though it appears to be already selected (so i just click the dot again that's next to the option) and then i can open control panel (with a lengthy wait).
Through this entire mess i've attempted to run malware bytes however it reacted the same way as windows firewall, control panel etc. click and nothing. So i tried uninstalling it and reinstalling it, only to find upon reinstallation: Error
C:\Program Files\mbs\mbamext.dll
Unable to register the DLL/OCX: RegSvr32 failed with exit code 0x0000005.
Click retry to try again, ignore to proceed anyway (not recommended), or Abort to cancel installation.
(retry just makes the error pop up again)
Upon ignoring, i then receive another error message the same as last time, but this time mentioning "C:\Program files\mbs\ssubtmr6.dl"
After i ignore that, i get another error, this time with "C:\Program Files\mbs\vbalsgrid6.ocx"
At the end of the messy installation, i launch the program but nothing happens. I've tried changing the .exe to .pif, .com and .bat and it still reacts the same.
I have tried running spybot - search and destory and it scans successfully about halfway, then sometimes an error box comes up saying the system will shutdown in (countdown), or, it just shuts down arbitrarily in the middle of a scan. The system shutdown message is as: "This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY/SYSTEM" I have tried doing Run - shutdown -a
but it doesn't work for me.
I've removed a few entries by stopping the scan and removing results already found, and there have been a few registry changes and viruses found, one saying "Microsoft. WindowsSecurityCenter.FirewallOverride" and another with "Microsoft.WindowsSecurityCenter_disabled". I've fixed these particular ones, however the problem with firewall and security center still exists. They won't open.
Any help would be welcome, I'm sorry if this was tedious or long-winded but i wanted to be as specific as i could be. I'm at the end of my rope but I really do not want to reinstall the OS, I want to fix this problem. I'm afraid to connect to the internet, but when i do (i use wireless) it seems to be "finding network address" constantly and it never connects properly, thus firefox opens saying it isn't connected to the internet. I'm worried that the computer starts to download malware whenever i try to connect it to the internet. I have tried to research this, and tried a few things (like deleting the stuff spybot found, changing malwarebyte's file extension name and the shutdown -a thing) but I'm getting really frustrated. I only hope someone can help with this.
EDIT: I decided to put down some of the rogue proceses incase that helps either.
GoogleUpdate.exe
sysguard.exe
services.exe - i have never seen this before, but apparently it is "Unable to Terminate Process. This is a critical system process. Task Manager cannot end this process.
jqs.exe
csrssc.exe
PIFSvc.exe (not sure whether it's bad or not)
netsh.exe (only appears for a short while after login, then dissappears by itself. There are two netsh.exe's)
FURTHER EDOT: After doing research, i downloaded hijackthis onto my laptop and got it onto the desktop with a thumbstick. I installed it but when i try to run it, it doesn't open or react. I have tried both in normal and safe mode and it works in neither.
Back to top
