So I have windows XP, and my Norton antivirus expired years ago... in its place I have AVG, which I've long since given up on trying to keep up with all the updates. I get occasional warnings of viruses, and AVG is rarely able to perform my "heal" or "remove" commands, however the viruses never did anything (that i noticed), so I let it be...
Anyway, Windows security alerts was bugging me for updates, so on July 30, against my better judgement, I ran the update and some service pack gets installed. Next thing, AVG is constantly alerting me of dozens of trojans (without being able to do anything about it, as usual), and immediately my wireless internet connection fails (it is constantly "acquiring network address"). Same problem even if I plug directly to modem.
I've ran into minor virus trouble before (sometimes they just die away on their own after a week) so I do the simplest thing I know that works - system restore. The process goes all the way through to reboot, but after logging in, it tells me "restoration not complete, cannot be restored to such and such date". Tried several times, and also in safe mode, to no avail.
Today (Aug 3) someone told me to turn off the antivirus before trying again (never had to do that before), but this time, the restore points are unavailable altogether... I now have a restore point for Aug 2, but nothing before that... which is kind of useless since the s--- storm began July 30...
Now I'm really screwed!!
Btw, the warnings have subsided since day 1, and nothing else is wrong with my computer, except for no internet... what am I going to do with all this spare time!?!? Edit: Might as well add that I've been dealing with the annoying google redirect virus for about 3 weeks...
So I followed the preparation guide, and did everything except for run the DDS script... all I get is a notepad window with weird symbols including "this program cannot be run in DOS mode" on the first line. Anyway, here's the log:
GMER 18.104.22.16881 - http://www.gmer.net
Rootkit scan 2010-08-04 03:27:45
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Martin\LOCALS~1\Temp\awloqpob.sys
---- Kernel code sections - GMER 1.0.15 ----
init C:\WINDOWS\system32\drivers\tifm21.sys entry point in "init" section [0xF6931DBF]
---- Devices - GMER 1.0.15 ----
Device \FileSystem\Udfs \UdfsCdRom tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\meiudf \MeiUDF_Disk tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\meiudf \MeiUDF_CdRom tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Udfs \UdfsDisk tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
---- EOF - GMER 1.0.15 ----
Hope this is just the garden variety for you experts out there! Thanks in advance!
Edited by chowder87, 04 August 2010 - 04:16 AM.