"Your System is Infected! System has been stopped due to a serious malfunction. Spyware activity has been detected. It is recommended to use spyware removal tool to prevent data loss. Do not use the computer before all spyware is removed."My system is Windows XP service pack 3
What I've done so far:
- First things first I closed down the internet and closed every window
- Then I ran the anti-virus and spyware tools I had installed (Norton internet Security, Spybot Search and Destroy). Spybot finished first and found about 10 things which it removed and Norton found nothing that Spybot did not.
- Installed and ran MalwareBytes which found 27 items which it claims to have removed
- Attempted to restore to a previous version of Windows through system restore but found that my restore points have been wiped out
- Attempted to start in safe mode but when I try a large list of Windows directory items fly through the screen and then it resets
This Left me with only two obvious problems left, one is the annoyingly green background message and the other is when any browser is open it attempts to direct me to some site.
After much searching through forums on this site and others and attempting many solutions to get Malwarebytes working I succeeded in updating it. The problem now is that after about 5 seconds of scanning it causes a blue screen of death which is too fast to read and resets the computer. This problem has persisted through several reinstalls and attempting everything [post="http://www.bleepingcomputer.com/forums/t/267354/for-those-having-trouble-running-malwarebytes-anti-malware/"]Here[/post]. Also this is now occurring when attempting to scan with Spybot as well.
As a recent result after several blue-screens while attempting the above workarounds for malwarebytes the background image has stopped loading and I now get the "Active Desktop Recovery" screen. Also of interest is my original desktop background is loaded each time I re-boot but it quickly changes to the desktop recovery screen. Lastly when I was running rkill.exe the background would flash back to my original desktop for a few seconds as if the malware is gone but seems to quickly reassert itself.
Having run out of forum solutions to try and at the end of my rope I'm posting here in the hope of a solution short of reformatting and reinstalling Windows.
I have all the logs from Spybot, Malwarebytes, and Rkill and can transcribe them at your request.
Edited by Jaklyman, 22 February 2010 - 05:11 AM.