Re: redirected from an MSN link


"Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EC629D08-F499-4BC3-879B-F368109C07DD@xxxxxxxxxxxxxxxx
Thanks for your help in advance.
I understand that one should post one problem at a time but this all
started
at the very same time.
Everything was working fine until this incident.
Yesterday morning my gf was surfing around. She says she clicked on a
link
on a MSN page. A box came up and said "you are being redirected". Our
antivirus then popped up listing a couple files it had deleted and noted a
couple of files that were infected but could not be deleted.

I suspect a lot more happened than just being redirected.

Snipped>


When the machine boots I get the error message "there was a problem
opening
zzpnfq4.exe."

That appears to be a variant of FQ4.executable.
zzpnfq is a notorious Chinnese gay porn grab site,
you can google it if you want, but don't open any of
the results/links that google produces.
If It is the executable, removing after it has executed is like
closing the stable doors after the horse has bolted.


I found zzpnfq4.exe in the system32 dir and removed it. I
also removed any reference to zzpnfq4.exe from the registry. The issues
continued unchanged. I also was not able to find any reference to
zzpnfq4.exe anywhere on the web.

When I shut the machine down an error message come up referencing
"mastask32". that's all I can get of the error message because it flashes
by so fast.


I suspect it is a variant of the password stealer mstask32.exe
Google: "mstask32" for full information.



I am open to suggestions and am willing to provide any more info that
might
be helpful.

thanks again,
Chris


From your description, it was more than being re-directed,
someone has clicked to agree/download/install naughties?
There appears to be severe and deep corruption.
Do you have an XP installation disc?

Recovery console
http://support.microsoft.com/kb/314058

How to install and use recovery console:
http://support.microsoft.com/kb/307654

Try: "Last known good configuration"
http://www.webtree.ca/windowsxp/repair_xp.htm#How%20to%20access%20Last%20Known%20Good%20Configuration:

Recovery from Command prompt
http://www.webtree.ca/windowsxp/repair_xp.htm#How%20to%20access%20the%20Recovery%20Console:

Repair install - you need the XP disc
http://www.webtree.ca/windowsxp/repair_xp.htm#How%20to%20Repair%20Windows%20XP%20by%20Installing%20Over%20top%20of%20Existing%20Setup:


.

Relevant Pages

  • Re: can not start my laptop! help!!!
    ... Error Message: Windows Could Not Start Because the Following File Is Missing or Corrupt... ... How to Install and Use the Recovery Console in Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: XP start failure
    ... Background on Stop Error message ... How to install and use the Recovery Console in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Recovery Console and SP3
    ... Is there a "newer" version of the recovery console? ... on my XP Pro SP 3 machine when I got an error message that stated the version ... would have to unstall the current version to install ASR. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Extra Goofy Microsoft message
    ... Maybe my eyes are better too, here is the exact sentence from the install ... "When the SQL Server 2000 SP2 and below message appears, ... What I actually did was Google the error message and simply ...
    (microsoft.public.windows.server.sbs)
  • Re: Missing file....
    ... >Error Message: Windows Could Not Start Because the ... >How to Install and Use the Recovery Console in Windows XP ...
    (microsoft.public.windowsxp.general)
Loading