It all started almost two weeks ago on August 16th, when my computer was somehow infected with the “Security Protection” Virus (see http://removerogues.blogspot.com/2011/08/security-protection-removal-how-to.html
for info on that). Precisely how I got infected with this annoying piece of crapware is totally beyond me, considering all that I use the internet for is mostly facebook, youtube, and e-mail. Anyway – I was able to run my computer in Safe Mode with Networking and download Malwarebytes. A full scan with Malwarebytes revealed two infections on my PC (if I recall correctly). One was called “Spyware.Passwords.XGen,” and the other “Trojan.Fakealert.” I removed both of them and rebooted the computer back in regular XP, and my PC appeared to be functioning normally again (Security Protection was no longer hindering me from opening and running programs). Ever since that day, however, Malwarebytes has been regularly detecting and quarantining various Trojans and malware programs that keep trying to execute themselves on a daily basis. It is always the same five or six programs attempting to execute themselves under different file names:
1.) Spyware.Passwords.XGen (detected and quarantined 18 different times since Aug 16th).
2.) Trojan.FakeAlert (detected and quarantined 3 different times since Aug 16th).
3.) Trojan.Hiloti (detected and quarantined 6 different times since Aug 18th).
4.) Trojan.Agent (detected and quarantined 2 different times since Aug 17th).
5.) Exploit.Drop.2 (detected and quarantined 2 different times since Aug 21st).
6.) Rogue.Spypro (detected and quarantined 1 time since August 16th).
No matter how many times I run Malwarebytes and other Anti-spyware / Anti-virus software and quarantine or delete the infected items, they always immediately start coming back under different file names. In addition to this, Malwarebytes also keeps blocking various outgoing attempts to connect to malicious websites. It’s always the same handful of IP addresses (18.104.22.168, 22.214.171.124, 126.96.36.199 are just a few examples). I know that my PC has to be infected with something that is causing all of this, as I am also experiencing a handful of other annoying symptoms – my computer is at times running a lot slower than usual. I also keep getting random error messages that I never did before – such as “Win32 Generic Host Process has encountered a problem and needs to close.” I also won’t be able to open basic programs like Microsoft Word unless I reboot my computer. Restarting the computer also takes forever – I usually end up having to manually turn it off with the hardware button then turn it back on. I have also noticed that all of these symptoms ONLY begin to occur when I connect to the internet. I am hoping that someone here might be able to shed light on what the problem is, and walk me through step by step on how to fix it. Any help would be greatly appreciated, thanks!