I am pretty sure the PC I am working on is still infected. A friend asked me to help fix this, but it has gone beyond my knowledge.
It is a Dell Inspiron 530 with Windows XP 64bit.
She noticed the anti-virus program had been out of date for some time. She installed Avast, ran a scan, cleaned files, then it BSOD. After a reboot it was unable to go into windows at all.
That is the point where I received it. I booted up with Ubuntu Live CD ran ClamTK cleaned 10 infected files, rebooted into windows repair mode, restored to a previous restore point.
Booted up into windows. Ran cClean, malware bytes, uninstalled Trend Micro Security suite which was not working.
Attempted to install MSE & AVG AntiVirus. Both tell me unable to access windows installer. The service is running and I attempted this fix by microsoft http://support.microsoft.com/kb/2642495
I even upgraded from Vista SP1 to Vista SP2 and still no success.
Any help would be much appreciated. I have already backed up all the files to an external drive. My next course of action if I cannot fix this is to run a complete restore from the dell partition.
Edit: I managed to run a quick scan on symantec's website and it looks like an infection on just the little bit I was able to scan. Here is a copy of the results, but any help on what I should do would be very helpful.
C:\Windows\Temp\ngehvn\setup.exe is infected with Suspicious.IRCBot
C:\Windows\SysWOW64\73j3FpS.com is infected with Suspicious.IRCBot
C:\Windows\SysWOW64\FastUserSwitchingCompatibilityex.dll is infected with Backdoor.Trojan
C:\Windows\system64\consrv.dll is infected with Trojan.Gen.2
C:\Windows\System32\73j3FpS.com is infected with Suspicious.IRCBot
C:\Windows\System32\FastUserSwitchingCompatibilityex.dll is infected with Backdoor.Trojan
Edited by WilliamJV, 24 December 2011 - 03:56 PM.