Posted 28 June 2010 - 06:09 PM
So last Monday my computer (running Windows XP, SP3) got hit with some nasty stuff calling itself the "AV Security Suite Demo." I rebooted into safe mode and ran AVG and MBAM. MBAM removed 8 infections. AVG found one, but couldn't remove it. That's the Win32/Patched.DX. It's noted as white-listed and a critical file. It's located at C:\WINDOWS\system32\drivers\rasacd.sys
After rebooting into normal mode and updating AVG, MBAM, and Spybot, I scanned with all three. AVG and MBAM gave the all-clear, but Spybot removed one infection. I've updated and scanned several times in the last week with all three, and they'd found no infections. Yet ... my PC is still acting weird: slow, volume was messed up (but I fixed it), there are 8 svchost.exe's in my Task Manager, I can't paste from a website text+pics into Word when that used to work just fine.
Mostly I'm worried that the Win32/Patched.DX is still hanging around as AVG apparently did nothing to it since it's white-listed/critical. I'd just like to know if my computer is infected or not and how to clean it.
Thank you so much for your assistance!