For the last four and a half hours I have been grappling with malware unleashed by an email trojan in a fake .avi file opened by an unsuspecting family member.
The initial symptoms were those brought about by malware of the Antivirus XP/Spysheriff variety. Perhaps there is a new strain, as the names of the system processes I had to kill were different to those named in the guides I was using to remove them.
Since completing this (and in the most satisfying instant, deleting the perpetually taunting .bmp background file), I find that I am:
1. Without an internet connection/any kind of networking capability.
2. Unable to change my background image or replace this horrid 'Windows Classic' theme. In fact, half of the tabs from Display Properties have evaporated.
3. Perhaps in some kind of Windows lockdown mode? USB devices are only detected on restart - waiting and refreshing the page in My Computer doesn't work. And (not that it ever really did, but 'Eject'/'Safely Remove Hardware' doesn't work either. Maybe all the Active Desktop style things have died?
4. Informed every time I start in Selective Startup Mode, in order to prevent threatening processes from starting, that I do not have the authority to make the changes I have made despite being logged in as the system administrator. And the changes seem to be made, regardless.
For a while, every time I restarted the PC (XP/SP2), McAfee diagnosed joke-bluescreen.c, but doesn't really seem to have done anything about it. I am not convinced that the problem is necessarily joke-bluescreen.c, and perhaps this is McAfee using its magical heuretic identification powers. Anyway, I'll give it the benefit of the doubt.
I am sure I don't know or understand nearly as much about this kind of thing as the talented volunteers here. So I shall not theorise out of my depth any longer about possible causes - I will leave it to you - the experts - as impotent as this makes me feel.
Any assistance would be greatly appreciated.
Please find attached: hijackthis.log