When I started working on the computer it would not log in due to WPA saying i needed to register windows but it is a legitiment copy of windows professional running on a dell (2.53GHZ 512mb ram pentium 4) I booted it in safe mode and did sysprep to get 30 more days because it wouldn't let me activate windows it just went back to the login screen.
So now it logs in but has these problems
-There is no task bar but the icons still appear
-explorer is running but it only uses 3200Kb and opens multiple explorer.exe's (already unchecked that box that says opens seprate threads in same process)
-there is only 1 or 2 svchost.exe's much less than regular i think and there's only 17 total processes
-there is no drag and drop making it impossible to move his autocad files and put them on a cd
-it has a D-Link Wda1320 wireless card which won't let me connect to the internet
-i can't create a new connection in my networks
-The newest version of Mcafee is installed but it won't run
-Combofix won't run due to system restore point but i can't install that and i can't drop the file onto combofix like it says to do so that won't run
-malwarebytes won't start due to a bad ocx file so I installed the visual basic 6 thing and it still won't run with the same error
-registry mechanic won't get past the loading screen
-I did sfc /scannow and ran that with no result
so here's where i'm at he can still use autocad and work on the jobs but he can't get them off the computer. i loaded xp pro on another drive for that computer so i can boot off that drive with his original C: harddisk connected and that drive has the D-Link drivers and firefox so he can email his files off the c: drive but he wants his regular drive.
Why not just format it and reload windows you ask? well he moved his office to home because of high rent and we left some stuff behind. like his autocad disk. and he is also running Mech-Q. we just don't have the money right now to upgrade his software (autocad and Mech would be like $7000)
I think it's a bad worm if anyone could help me at all I would be forever in your debt. I hate to be such a pain but we just can't afford to lose this computer right now i"m sure with the economy the way it is many of you know the situation we're in right now.
Thank you again so much,
Edited by dellrick, 29 July 2010 - 01:18 PM.
Moved from Malware Removal Logs to Am I Infected (no logs posted) ~ Hamluis.