Next I attempted to update her Ad-Aware, but it stopped downloading the update at 5%.
I downloaded Spy-Bot, A-Squared, Ccleaner and Stinger (they updated sucessfully). Rebooted in safe mode and ran those programs. I ran Ccleaner first. Spybot reported hundreds of problems, which I quarantined. A-Squared also reported hundreds of problems, including Trojan-Downloader.Win32.f, Trojan-Downloader.Win32.Winshow.l, Trojan-Downloader.Win32.Swizzor.g and Trojan-Downloader.Win32.Tooncom.k. Stinger reported nothing.
Next I rebooted in normal mode. Uninstalled her old Java updates (I'd read that leaving old versions of java lying around can be dangerous), removed some unnecessary programs, and installed AVG Anti-Virus (she had Norton, but it hadn't been updated for years. My plan was to install the freeware for her and then disable and remove Norton as I'd read that running more than one anti-virus program is worse than running none).
AVG immediately reported that the computer was infected with the virus Win32/Kibik. I selected quarantine even though AVG warned me this might cause some programs to malfuntion (no idea if it worked).
Then I rebooted to go in to safe mode, only safe mode wouldn't fully load. I got to the desktop, but none of the programs appeared to be loading. It was just a black screen with the words "safe mode" at the top and bottom.
I attempted to reboot in normal mode and the same thing happened. I got as far as the desktop wallpaper, but none of the programs were loading (no start menu, no icons, etc). I hit ctrl-alt-del and found that the following programs were running:
- System Ide Process
But no others. Some programs will appear in the tast manager (e.g. WgaTray, wuauclt), but then quickly disappear of their own accord.
I then rebooted while holding down F2 to do a system restore, but it just booted in normal mode the way it had before without ever showing me the system restore option.
Does anyone have any idea what I could do to get out of this mess? Even if I can access the computer again there's clearly some nasty stuff on there that needs to be removed. But at least then I could record a HijackThis log for you all. My poor mom just wants to play solitaire and check her e-mail. I feel awful for crashing her computer. Even if it was inevitable. :(
Moderator Edit: Moved topic to the more appropriate forum. ~ Animal
Edited by Animal, 15 August 2007 - 12:02 AM.