BleepingComputer.com: Windows XP SP3 has some sort of redirector and unknown malware idendified by Trend Micro

Gringo -

Okay, here is what I know so far. I doubt it is conclusive yet, but maybe it will provide you some insight...

Method1, the guided help is not working. I'm unable to download the file it needs after downloading the installer. It says it is not available now and to try again later. I tried this several times over a span of time with no luck.

I'm currently working method2. On the services tab, I started with disabling everything and rebooting. I was surfing away in normal boot, going places, watching video, I had the task manager open, to try to simulate what I was doing when it would freeze.

It seems that it would freeze up within less than 5 minutes. So I would surf for 8 to 10 to get past that window.

Right now it appears to be Malware Bytes Pro and something else. I turned on stuff one or two at a time until saw the problem. I then unchecked MBAM Pro and then proceeded down the list. Things were fine. So now I'm trying to find what the combo is that causes it to freeze. Not sure this is the correct "scientific" method though...

What else do I need to try?

Thanks,
-Chris

This post has been edited by Smurf-Slayer: 01 February 2012 - 11:09 PM

it seems you are on the right track - it is just a matter of doing what you are doing

enable one and disable another till you find the bad one



gringo

Hello

48 Hour bump

It has been more than 48 hours since my last post.

• do you still need help with this?
  
• do you need more time?
  
• are you having problems following my instructions?
  
• if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

Gringo -

Well, I've left it running a couple days now, to verify that the system won't freeze. Now it appears that the hard drive has crashed. It won't boot up. When I can get to the Windows XP boot screen, the blue bar just scrolls by and it never boots up... So I'm working that issue now.

Do you have any suggestions?

Thanks,
Smurf-Slayer

Try this please. You will need a USB drive.

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer

• Insert your USB drive
  
• Press Start > My Computer > right click your USB drive > choose Format > Quick format
  
• Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  
• Press Run then OK
  
• Select the DiskImage option then click the browse button located on the right side of the textbox field.
  
• Browse to and select the xpud-0.9.2.iso file you downloaded
  
• Verify the correct drive letter is selected for your USB device then click OK
  
• It will install a little bootable OS on your USB device
  
• Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
  
• After it has completed do not choose to reboot the clean computer simply close the installer
  
• Next download http://noahdfear.net/downloads/driver.sh to your USB
  
• Remove the USB and insert it in the sick computer
  
• Boot the Sick computer
  
• Press F12 and choose to boot from the USB
  
• Follow the prompts
  
• A Welcome to xPUD screen will appear
  
• Press File
  
• Expand mnt
  
• sda1,2...usually corresponds to your HDD
  
• sdb1 is likely your USB
  
• Click on the folder that represents your USB drive (sdb1 ?)
  
• Confirm that you see driver.sh that you downloaded there
  
• Press Tool at the top
  
• Choose Open Terminal
  
• Type bash driver.sh
  
• Press Enter
  
• After it has finished a report will be located on your USB drive named report.txt
  
• Remove the USB drive and insert back in your working computer and navigate to report.txt
  
  Please note - all text entries are case sensitive

Copy and paste the report.txt for my review

Hello

48 Hour bump

It has been more than 48 hours since my last post.

• do you still need help with this?
  
• do you need more time?
  
• are you having problems following my instructions?
  
• if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.