Missing system 32 files on startup and sonic installer active

[toerocket]

I have a dell laptop inspiron 630m running windowa XP
I think i may have a virus/hijacker, recently my anti virus went crazy and
started deleting parts of normal files(Corel, sonic and others) it recognised
as virus. I tried to do a system restore but it wouldn't work and the date of
the available system restore is the date when the problems began. I don't
want to run avg again until i find out what the problem is. I have dowloaded
threatfire and run trend micro and mcaffee but it hasn't fixed anything.
I have tried to delete the files running in a loop telling me to put in a cd
to reinstal the files such a sonic
regards
Don

 

[PA Bear]

You've got a paticularly nasty new Vundo variant infection, my friend.
After getting the machine cleaned up, you may have to reinstall several
applications (e.g., Corel, Sonic).

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/



toerocket wrote:
> I have a dell laptop inspiron 630m running windowa XP
> I think i may have a virus/hijacker, recently my anti virus went crazy
> and
> started deleting parts of normal files(Corel, sonic and others) it
> recognised as virus. I tried to do a system restore but it wouldn't work
> and the date of the available system restore is the date when the problems
> began. I don't want to run avg again until i find out what the problem is.
> I have dowloaded threatfire and run trend micro and mcaffee but it hasn't
> fixed anything.
> I have tried to delete the files running in a loop telling me to put in a
> cd
> to reinstal the files such a sonic
> regards
> Don

 

[Ron H]

Hi PA Bear, Is there any more to read on this ? Ron H (Defender)

"toerocket" wrote:

> I have a dell laptop inspiron 630m running windowa XP
> I think i may have a virus/hijacker, recently my anti virus went crazy and
> started deleting parts of normal files(Corel, sonic and others) it recognised
> as virus. I tried to do a system restore but it wouldn't work and the date of
> the available system restore is the date when the problems began. I don't
> want to run avg again until i find out what the problem is. I have dowloaded
> threatfire and run trend micro and mcaffee but it hasn't fixed anything.
> I have tried to delete the files running in a loop telling me to put in a cd
> to reinstal the files such a sonic
> regards
> Don

 

[PA Bear]

See
http://www.broadbandreports.com/forum/r19702820-Virtumonde-would-someone-please-shoot-these-guys
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Ron H wrote:
> Hi PA Bear, Is there any more to read on this ? Ron H (Defender)
>
> "toerocket" wrote:
>
>> I have a dell laptop inspiron 630m running windowa XP
>> I think i may have a virus/hijacker, recently my anti virus went crazy
>> and
>> started deleting parts of normal files(Corel, sonic and others) it
>> recognised as virus. I tried to do a system restore but it wouldn't work
>> and the date of the available system restore is the date when the
>> problems
>> began. I don't want to run avg again until i find out what the problem
>> is.
>> I have dowloaded threatfire and run trend micro and mcaffee but it hasn't
>> fixed anything.
>> I have tried to delete the files running in a loop telling me to put in a
>> cd to reinstal the files such a sonic
>> regards
>> Don

 

[Ron H]

Thanks PA Bear, Nasty little thing. Ron

"toerocket" wrote:

> I have a dell laptop inspiron 630m running windowa XP
> I think i may have a virus/hijacker, recently my anti virus went crazy and
> started deleting parts of normal files(Corel, sonic and others) it recognised
> as virus. I tried to do a system restore but it wouldn't work and the date of
> the available system restore is the date when the problems began. I don't
> want to run avg again until i find out what the problem is. I have dowloaded
> threatfire and run trend micro and mcaffee but it hasn't fixed anything.
> I have tried to delete the files running in a loop telling me to put in a cd
> to reinstal the files such a sonic
> regards
> Don

 

[PA Bear]

Yes, and it's getting nastier every day.

Ron H wrote:
> Thanks PA Bear, Nasty little thing. Ron
>
> "toerocket" wrote:
>
>> I have a dell laptop inspiron 630m running windowa XP
>> I think i may have a virus/hijacker, recently my anti virus went crazy
>> and
>> started deleting parts of normal files(Corel, sonic and others) it
>> recognised as virus. I tried to do a system restore but it wouldn't work
>> and the date of the available system restore is the date when the
>> problems
>> began. I don't want to run avg again until i find out what the problem
>> is.
>> I have dowloaded threatfire and run trend micro and mcaffee but it hasn't
>> fixed anything.
>> I have tried to delete the files running in a loop telling me to put in a
>> cd to reinstal the files such a sonic
>> regards
>> Don