A couple of days ago I began to notice virus issues. Symantec and SuperAntispyware(Free Edition) appeared to get rid of everything except that virus that redirects google searches. Also, I kept getting an alert when logging in that said symantec was turned off, even though it appeared to be on so i'm not sure if that was related to the viruses or not. The alert would go away if I right-clicked on the tray icon and actually shut autoprotect off, and then turned it back on. I couldn't for the life of me get rid of that google redirect virus though, despite multiple scans from symantec and SuperAntispyware.
So now we come to the embarrassing part. I used ComboFix, because I thought that I would be ok by looking at other topics on the subject. Mea Culpa.
ComboFix took a long time to run, at least given what I had read about it. When it was finally done and rebooted the computer, all of my files appeared to be gone. There are no programs listed in the 'Start', 'All Programs' tab apart from 'Startup'. I can't see any of my documents or pictures. Thanks to Robert717's thread in the Antivirus, Firewall, and Privacy Products and Protection Methods forum, I learned that my files and programs are in fact not deleted, but quarantined at the location C:\Qoobox
I did the start, run thing for "C:\Qoobox" and a folder comes up, within which are 2 folders named "BackEnv" and "Quarantine" and 3 files named "Add-Remove Programs.txt", "ComboFix-quarantined-files.txt", and "SnapShot@2010-01-24_23.44.18.dat". Just for the heck of it, I tried to see if the files that had been in "MyDocuments" were still there, and saw that they were under "C:\Qoobox\Quarantine\C\Documents and Settings\[My User Account Name]\My Documents." However, everything ends in ".vir" and I am afraid to try to open any of it since the icons for Word, Excel, or whatever other programs created them aren't appearing.
I attempted to attach the ComboFix log file instead of pasting it, since it is extremely long, but the upload failed and I got the message "the file was larger than the available space". If you want me to still paste it, I will. Any help is greatly appreciated, and again I'm sorry I didn't do this before running ComboFix
Edited by y2roby, 24 January 2010 - 09:57 PM.