Another Win32/Cryptor virus, sorry to be boring.
Just a couple background details:
I have two operating systems installed (partitioned off the same drive), XP and Vista. My XP is infected (I was browsing, of all things, goal.com and noticed a background process starting) - I ran AVG immediately and it picked up on the identity of the virus and killed/cured a few files. Had to restart for the next part and it goes to the XP log in screen (you know, where you select the user) and freezes there. The mouse still moves around but won't let me actually do anything.
I can get into XP safe mode fine (and have done as much).
So right now I'm using my Vista partition to solve the problem. I've run AVG in Vista on both partitions and cured up a few things - trojans and the like, but not the win32/cryptor.
Having read around a bit, I know that the next step is the Malwarebytes' Anti-Malware
This is currently in the process of being run - it found a single infection of a registry key in my Vista partition, and is currently scanning the XP partition.
I will post the logs as soon as I get them.
Summary of my action since this first post (saves you reading everythign below)
Ran Malwarebytes, it solved out a few problems, I can boot into XP now, but I'm getting audio adverts playing and hijacked google links. Running another Malwarebytes (in vista - it doesn't work in XP, or safe mode XP) to look for the problem, but so far no infections discovered.
Edited by browha, 26 July 2009 - 12:45 PM.