Re: XP + MSN + Worm - System now unstable

Tech-Archive recommends: Fix windows errors by optimizing your registry

John Reinders wrote:
Hi,

The other day (Monday) my son inadvertently (and I have warned him about doing this) opened a file (zip containing a .scr) he received from someone he's known for awhile on MSN and low and behold his system became infected. AVG reported the offending worm as:

Trojan Horse Downloader Generic5.ETN and .SOZ Not sure of the actual name of it...

Infected files, vnttgb.exe, notify.dll, printers.exe, 1(l)p6fw.sys, DefLib.sys and oocmhxl.exe...

He ended up with multiple cascading MSN windows, he hit Ctrl Alt Del to stop it, he momentarily saw the process that was running, but then all processes disappeared from process manager? He no longer is able to use Ctrl Alt Del or the manager, and depending on what he is doing will end up with a BSOD because of a Stop Error... IRQL_Not_Less_Or_Equal

We have run AdAware, AVG multiple times - plus in safe mode and believe we have cleaned out the offending worm. We were unable to run HiJackThis, as it also caused the same BSOD? We have tried to do system restores and have gone back to multiple checkpoints in the last two weeks, but none were successful. The problem is his system is now unstable.

I'm assuming our best solution is to format the drive and reinstall XP?

Has any one else run across this one and is there a simpler solution to fix what is broke?

I would appreciate any suggestions and help you can offer.

Thank you, John

Try running the AVG software from Safe Mode. With Avast! you can schedule a bootscan which should run before any virus can disable the software.

--
Joe =o)
.

Relevant Pages

  • Re: HELP: Home IE6 SP6 unresponsive (90%-98% CPU)
    ... never thought running in safe mode was neccesary. ... > if you don't have a network in your home or you only have 1 computer, ... >> AntiSpyware and install it instead in my wife's notebook. ... > We installed AVG on personal computers for about 80 Sorority residents ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Cannot keep puter error free
    ... Starting your computer in Safe mode ... AVG Anti-Virus Free edition Updates ... Download FREE ZoneAlarmŽ (Firewall Protection) ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot keep puter error free
    ... Starting your computer in Safe mode ... AVG Anti-Virus Free edition Updates ... Download FREE ZoneAlarmŽ (Firewall Protection) ...
    (microsoft.public.windowsxp.newusers)
  • Re: Cannot keep puter error free
    ... Starting your computer in Safe mode ... AVG Anti-Virus Free edition Updates ... Download FREE ZoneAlarmŽ (Firewall Protection) ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Cannot keep puter error free
    ... Starting your computer in Safe mode ... AVG Anti-Virus Free edition Updates ... Download FREE ZoneAlarmŽ (Firewall Protection) ...
    (microsoft.public.windowsxp.hardware)