Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


google redirected links.antivirus programs wont run

  • Please log in to reply
1 reply to this topic

#1 rocslocs


  • Members
  • 1 posts
  • Local time:12:23 AM

Posted 12 September 2009 - 10:37 PM

hello.please help.noticed the following
1.computer slower than usual especially when using internet explorer

2.google links are redirected(happening only in firefox)

3.cant use search box in firefox, it just shows a blank browser window.websites typed directly in the address box are working

4.no antivirus is able to run.(malware bytes antimalware spybot and avg).they all shut off after 2 seconds.some, like malwarebytes antimalware give this message "Windows cannot access the specified device, path, or file. You may not have the appropiate permissions to access the item".

5.AVG suddenly has its email scanner disabled.it found some infections but says "virus vault initialiaztion failed.window will now close".

things i did/was doing prior to the problem

1.updated firefox

2.hit a popup in a webpage that suddenly downloaded a program called codec.exe even when i tried to prevent it from loading.

things i have done since then

1.system restore...didnt work.

2.reloaded and reinstalled avg and malewarebytes antimalware(also renamed file to see if it would work).they installed fine and updated ok but could not scan

3.did a kaspersky online scan and got thee following report.

Sunday, September 13, 2009
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version:
Last database update: Sunday, September 13, 2009 04:19:44
Records in database: 2799763

Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes

Scan area My Computer

Scan statistics
Objects scanned 67485
Threats found 4
Infected objects found 41
Suspicious objects found 0
Scan duration 02:03:10

File name Threat Threats count
svchost.exe\0D235022.x86.dll/svchost.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 4

globalroot\Device\__max++>\0D235022.x86.dll/globalroot\Device\__max++>\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 18

spoolsv.exe\0D235022.x86.dll/spoolsv.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

iTunesHelper.exe\0D235022.x86.dll/iTunesHelper.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

ClientGW.exe\0D235022.x86.dll/ClientGW.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

AppleMobileDeviceService.exe\0D235022.x86.dll/AppleMobileDeviceService.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

mDNSResponder.exe\0D235022.x86.dll/mDNSResponder.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

jqs.exe\0D235022.x86.dll/jqs.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

avgnsx.exe\0D235022.x86.dll/avgnsx.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

YahooAUService.exe\0D235022.x86.dll/YahooAUService.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

alg.exe\0D235022.x86.dll/alg.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

YAHOOM~1.EXE\0D235022.x86.dll/YAHOOM~1.EXE\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

iexplore.exe\0D235022.x86.dll/iexplore.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 3

GoogleToolbarNotifier.exe\0D235022.x86.dll/GoogleToolbarNotifier.exe\0D235022.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

C:\Documents and Settings\rosemary\Application Data\Sun\Java\Deployment\cache\6.0\22\d1ed7d6-6972065f Infected: Trojan-Downloader.Java.OpenConnection.at 1

C:\Documents and Settings\rosemary\Application Data\Sun\Java\Deployment\cache\6.0\49\35217071-3ac96174 Infected: Trojan-Downloader.Java.OpenConnection.at 1

C:\Documents and Settings\rosemary\Application Data\Sun\Java\Deployment\cache\6.0\57\4839f1b9-56e5d991 Infected: Trojan-Downloader.Java.OpenConnection.at 1

C:\Documents and Settings\rosemary\Desktop\wifey tunes\Mariah Carrie - Always Be My Baby.wma Infected: Trojan-Downloader.WMA.Wimad.v 1

C:\Documents and Settings\rosemary\Local Settings\Temporary Internet Files\Content.IE5\ZWB3PNY9\documents[1].htm Infected: Exploit.JS.Agent.ann 1

Selected area has been scanned.

computer has crashed.

keeps saying C\windows\sytem\services.exe was interrupted. by NT AUTHORITY. system will restart.and its now in a permanent cycle or restarting.

please please please please help.thank you.

Edited by rocslocs, 13 September 2009 - 10:34 AM.

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:03:23 AM

Posted 14 September 2009 - 03:24 PM

Can you get into safe mode without any problems?
Take a look at this tutorial and post back if you have any problems
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users