Posted 10 April 2009 - 04:24 PM
So, I'm not sure what exactly my problem is. Recently I had become infected with some malware (TDSS.sys and UACd.sys) and I took measures to remove them as best as I could. Further scans don't seem to find anything else, but I can't be certain I've gotten everything as I'm still having some strange behavior.
Initially, I noticed that I had something because my google seaches were being redirected when I would click on any search result (windowsclick.com, I believe) and in investigating and trying to fix that I found the TDSS rootkit and then later UACd. Spybot S&D would catch the TDSS infections and remove them, but they would come right back after opening a new browser, so I found Malwarebytes Anti-Malware and scanned my computer and seemed to successfully remove the TDSS and windowsclick problems.
Just the other day though I got a BSOD while browsing the internet (unfortunately, I didn't get a chance to read/copy it) and ever since then programs are constantly crashing on me. Internet explorer, AIM, iTunes, windows media player, winamp, to name a few, will crash immediately after they load. Always the same programs.
So, to make sure I didn't have anything else, I also downloaded GMER and scanned with that and found UACd.sys. After some searching I found out that ComboFix could remove the UACd rootkit and so I downloaded and ran that and seemingly took care of UACd, yet my problem still persists.
My only conclusions are that either my windows installation has just become corrupt, I screwed something up in the process of removing that malware, or there's still something infecting me?
I'm running Windows XP SP3, I've got all the critical updates as far as I'm aware and I'm using Firefox to post this (as Internet Explorer just isn't able to stay running).
I run AVG 8.5 (free version), Spybot S&D, Spywareblaster and Ad-Aware (though Ad-Aware doesn't seem to ever catch anything) for security.
I apologize for the long post (or if I've omitted any obvious information you might need), but I figure it's best to be thorough in explaining my problem.
Thanks in advance for your time,