Posted 29 December 2010 - 08:21 AM
I have a friend who has what appears to be a virus. Originally he had one of those hijack programs that would not let him do anything unless he bought their "antivirus" program to clean his computer. I was able to get rid of that problem, but then got hit with a redircter problem that I had more trouble with. In the process of getting that under control I enlisted the help of another site, but the help kind of died off. I did run several tests, one of them being combofix. It came back with
c:\windows\system32\winlogon.exe . . . is infected!!
c:\windows\explorer.exe . . . is infected!!
I was asked to go to the MS site and download SP3 for XP, which I did. Here is my last message regarding the problem.
...Tried to download from the webpage and get the download window popup, but it never actually starts the download. Just sits there with the animation of the file going from the spinning globe to the folder, but never downloads. I have left that open for an hour and download progress is still 0%. OK, went back to my place and downloaded the file onto my stick and took it back to the suspect puter. When I tried to install SP3, I get a message "The volume for a file has been externally altered such that the opened file is no longer valid", and I can not copy it over. If I take that same stick back to my computer it copies over just fine....
The last suggestion I received was to reformat...
Is that all that is left to do to help this guy, or are there still some roads untraveled?