Somethings got ahold of my Computer

[leon]

I am running XP with service pack 2. I am conected to the internet via
Yahoo by ATT, which offers Norton Security, Anitspyware, AntiVirus, Personal
firewall (I use Microsoft fire wall) Parental Controls (do not use) and AT&T
Mail Protection. While using this I have encountered trouble with website
pop ups...and security warnings (not from Microsoft although made to look
like they come from Micrsoft) These warning will tell me I have security
risks and pop up to a site that sells virus control and antispy. It will
tell me "Internet attack detected" Pop up warnings that say "Privacy
Conductor may find dangerous traces that need to be cleaned." This has also
taken over my background with " Warning: Spyware threat has been detected on
your PC. Also "Task manager has been disabled by administrator" I have not
done this and followed the instructionas to enable it only to find it
disabled again. I have downloaded Windows Defender and it has taken at least
6 Trojan:Win32/Conhook.D infestations off my computer in the last 2 days but
the problem continues. I don't know what else to do. My CDrom has failed as
has other media ports.
--
leon

 

[Malke]

leon wrote:

> I am running XP with service pack 2. I am conected to the internet via
> Yahoo by ATT, which offers Norton Security, Anitspyware, AntiVirus,
> Personal firewall (I use Microsoft fire wall) Parental Controls (do not
> use) and AT&T
> Mail Protection. While using this I have encountered trouble with website
> pop ups...and security warnings (not from Microsoft although made to look
> like they come from Micrsoft) These warning will tell me I have security
> risks and pop up to a site that sells virus control and antispy. It will
> tell me "Internet attack detected" Pop up warnings that say "Privacy
> Conductor may find dangerous traces that need to be cleaned." This has
> also taken over my background with " Warning: Spyware threat has been
> detected on
> your PC. Also "Task manager has been disabled by administrator" I have
> not done this and followed the instructionas to enable it only to find it
> disabled again. I have downloaded Windows Defender and it has taken at
> least
> 6 Trojan:Win32/Conhook.D infestations off my computer in the last 2 days
> but
> the problem continues. I don't know what else to do. My CDrom has failed
> as has other media ports.

In spite of all the security software you have installed (none of which I
think is very good), your computer is apparently infested with rogue
antispyware programs. My guess is that you probably installed them
yourself. Those programs are the ones giving you the messages that your
computer is infected and they themselves are malware. I can't address the
CD-ROM/USB ports issue but I suspect that if your computer were
virus/malware-free things would work. So, you need to clean up your
computer. You can do this yourself or take the machine to a professional.
See below for general removal steps:

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

 

[Sirtokalott]

Different Malware, which I had but it also disabled my task manager. I
downloaded spybot from CNET and that sorted things out

"leon" wrote:

> I am running XP with service pack 2. I am conected to the internet via
> Yahoo by ATT, which offers Norton Security, Anitspyware, AntiVirus, Personal
> firewall (I use Microsoft fire wall) Parental Controls (do not use) and AT&T
> Mail Protection. While using this I have encountered trouble with website
> pop ups...and security warnings (not from Microsoft although made to look
> like they come from Micrsoft) These warning will tell me I have security
> risks and pop up to a site that sells virus control and antispy. It will
> tell me "Internet attack detected" Pop up warnings that say "Privacy
> Conductor may find dangerous traces that need to be cleaned." This has also
> taken over my background with " Warning: Spyware threat has been detected on
> your PC. Also "Task manager has been disabled by administrator" I have not
> done this and followed the instructionas to enable it only to find it
> disabled again. I have downloaded Windows Defender and it has taken at least
> 6 Trojan:Win32/Conhook.D infestations off my computer in the last 2 days but
> the problem continues. I don't know what else to do. My CDrom has failed as
> has other media ports.
> --
> leon