Posted 24 January 2010 - 04:11 AM
My daughter's computer was infected after a McAfee subscription had expired. I am posting from my computer.
1) redirection to "random" unrelated sites when selecting an item from a google search. Both IE and Safari.
2) Some random period after any access to the internet a message about "Generic Host Process for Win32 Services" and "DCOM Server Process Launcher service terminated unexpectedly and needs to close" followed by a message to shutdown in 60 sec. (I use shutdown -a to disable the shutdown allowing me to run the tools without any additional problems). Inspecting the MS Errorlog, it states that the issue is with two files: svchost.exe.mdmp and appcompat.txt.
The computer is a Toshiba Satellite running MS Windows XP SP3. It was an OEM load and I believe that she has lost the restore disks, so running sfc was of no help.
I recently cleaned a \common\helper.sig issue (with other misc. findings) on her PC using McAfee, McAfee Stinger, and Malwarebytes' Anti-Malware, and TrendMicro Housecall, but not of the above is catching whatever is causing the google redirection. I also ran ComboFix to completion and it found and "cleaned?" something reporting rootkit activity, but it had no impact on the above two problems.
Thank you in advance for any help in resolving this.