Posted 08 May 2011 - 01:08 PM
This Virus popped up with messages that the hard drive was in trouble with disc errors, etc.
The PC is running XP SP3 x32.
I followed the Bleeping Computers procedure as follows:
Used Microsoft Disc Cleanup to remove temp files and clear out Recycle Bin.
Booted into Safe Mode with Networking.
Ran Malwarebytes Pro with latest updates, which found lots of bad stuff.
Tried to use Restore Points, in an effort to reset some Registry settings
that the Virus had changed. Could not get any Restore points to work either
in Safe Mode or regular Bootup.
Turned off Restore points, Ran Disc Cleanup again, and ran MalwareBytes again.
Ran Spy Sweeper which also found some bad things.
Ran hosts-perm.bat, and followed the replacement procedure.
Some desktop icons that were shortcuts to Apps were gone.
Ran Unhide, but still no icons. Add/Remove programs showed that the
Apps were still there (Quick Books showed 437 MB).
All Prgorams showed the App Folder, but when opened it said Empty or No Data.
Checked the permissions on the Folder, they were not Hidden, but set to
Read Only. Removed that check and Applied the change...still nothing.
Explorer did not show the applications either.
Found out the name of the executable for the App and did a search for it.
Once found, I created a new shortcut to the App on the desktop...Works fine.
Opening up a Microsoft Office document worked OK, but MalwareBytes kept
reporting that an unsafe URL 66.??? was trying to be accessed, but was being blocked.
Removed the normal.dot file associated with Microsoft Word. No help.
I ran Combo Fix (later learned that this is not always recommended).
Then ran the SpySweeper again and the problem seems to have gone away.
I did not run the De-Fogger or any RootKit programs.
The computer appears to be fixed, however I have a few questions !!!
How could I recover the original App icons?
Should I have run Root Kit removal programs?
At what point is a decision made to save the PC Documents and do a complete
OS reinstall. I am retired and have a lot of time to do interesting stuff.
I look at Viruses as a challenge...like a Suduku puzzle...however sometimes
they make me feel helpless, and I wished that I had just done a complete Format
from the Command Line and reinstalled everything...Maybe moving up to Win 7.
The PC always runs a lot faster !!