I have had a serious attack on my machine, which I partly dealt with, but there are still some remaining problems.
System: Win XP SP2
Cause: probably after trying to run "Shockwave_Installer_Slim.exe", Adobe Shockwave Player 11.
1. SuperAntiSpyware - could not update definitions ("There was an error trying to retrieve definitions... etc"; checked with my ZoneAlarm Firewall off, same effect); this is the first time in half a year of constant usage that I could not update definitions. I am pretty sure the reason for it is a block on my machine of www.superantispyware.com, see point 4 below.
2. Process FastNetSrv - appeared in the Task Manager; I killed it and tried to find the cause googling it; could not get to the sites - see the next two points
3. IE - massive phishing: after google search, clicking on the links leads anywhere, but to the sites shown (new symptom; IE had worked fine before this happened); copying and pasting solves the problem, but:
4. some Anti Malware sites are blocked - from both Opera & IE, namely:
The browser tries to load them, and then says "This page could not be displayed". I checked from an independent computer, the sites are working.
5. After trying to run SuperAntiSpyware on 18 Oct defintions, decided to reboot. On rebooting the Windows Logon appeared, and then DEP started closing userinit logon and any other application, resulting in an empty screen; Safe Mode did not work - freezing. I managed to gradually overcome that and made sure I can login and work. All programmes are operational as far as I can tell.
6. SuperAntiSpyware sees several Trojans:
Total scan results - items detected: registry - 6; files - 17; threats - 23.
After running the whole course and deleting it suggests to reboot. After rebooting all the Trojans stay intact.
7. Several nasty processes appear in the Task Manager after startup:
h, a, i, b - any letter really
some of these processes crash themselves shortly.
Not sure what to do. Any help would be appreciated.
Thank you in advance
Edited by vitaly7, 21 October 2009 - 12:37 PM.