Posted 18 April 2010 - 11:00 PM
After a long evening of trying to figure all this out - this is what I know (which ain't much!)
1. ran another scan with Malwarebytes and it found nothing, but problem persisted.
2. downloaded SUPERAntispyware, ran it & it found the following:
Trojan Agent/Gen-FakeAlert(Client Notify)
found it in the following: Files - C:\\Windows\System 32\Autocnfg.DLL
Programs - C:\\Windows\system32\Autocnf.DLL
I had it removed & quarantined. Did a restart, same results - no speaker icon on taskbar, within 30 secs of Windows loading - taskbar totally unresponsive. However, after about 20 minuites, everything unlocked itself, speaker icon reappeared, had sound could access Start Menu and open programs appeared in taskbar.
3. Went to My Computer/C:/properties/tools and ran chkdsk after checking both boxes. Only window to pop up was the one saying disk check utility needed exclusive access, need to restart. After restarting, chkdsk did scan. After 1-1/2 hours, it completed all 5 stages and found nothing. When Windows booted up after scan, same problem.
4. Tried to get into Start Menu/run/msconfg but taskbar froze up before I could complete. Waited 45 minutes & it still did not correct itself, so restarted pc. On resart, still no access to taskbar, speaker icon, etc. but it unlocked itself after about 10 minutes so I could check startup under MSCONFG. Most everything there was as it should be, but found 3 entries son was not familiar with:
did an internet search and only found info on the last one and not much on that. Seems it started appearing around the 10th of this month and general feeling is that it is spyware. I unchecked all 3 items from startup, hit apply and did requested re-start. Still the same problem........(this is getting old). Waited about 10 minutes, it unlocked itself - I accessed startup under MSCONFG - Rwiz was not running but other two had duplicated themselves and were running again.
That's where I am right now. Told son no more tonight.....