Annoyances.org
Home » Windows XP Discussion Forum » Message 1207925459 Search | Help | Home
  
System hijacked by malware?
Friday, April 11, 2008 at 7:50 am
Windows XP Annoyances Discussion Forum
Posted by Gill (30 messages posted)


I'm listing the symptoms here, as I don't have a clue what's causing this.

1. On Monday I was surfing in Firefox when the desktop just crashed (this almost 
never happened in firefox but usually in IE after long surf sessions). Explorer.exe 
failed to revive it, I had to navigate using Ctrl+Alt+Del for a while, but then I 
decided to reboot to restore the desktop.

2. On reboot, I clicked on stuff and they just won't respond, for instance the internet 
login link would not open, clicking on Start, the button would just look depressed 
without actually opening the Start menu.

3. I rebooted in Safe mode and things worked fine, I tried ccleaner, spybot (results 
were clean), stinger (clean), SDfix, Combofix. Nothing made a normal startup work 
as normal.

4. Finally thought of System Restore -- restored to last Thursday (April 3), things 
went back to normal.

(Things stayed normal for  2 days)

5. Wednesday, was surfing again, opening explorer windows began to look buggy again 
in that the whole menus would not display right, so I rebooted.

6. Same symptoms as (2) above, so I rebooted in Safe mode.

7. In Safe mode, Combofix failed to initialize, used SDfix until it asked for restart, 
restarted but the log failed to show up as the desktop totally hanged midway.

8. Back in Safe Mode again, tried to look for a System Restore point, there was none! 
I thought they are only deleted after 90 days?

9. Still in safe mode, tried running Spybot again, the screensaver kept starting 
after 1 minute, I right clicked on desktop to set it to 15 minutes, it just set itself 
to 1 minute again (malware?). Spybot showed a clean result.

10. Rebooted normally, hanged a few times when opening a folder, clicking on the 
manual internet login link or even right click desktop (will not show desktop settings 
menu).

11. Reconfigured router to auto-login mode to bypass the manual login desktop link, 
managed to connect to internet.

12. Tried to make a HijackThis log, failed on two reboots, each time it shows:

"This action cannot be completed becasue the other application is busy. Choose "Switch 
To" to activate the busy application and correct the problem"

It just stayed that way with the error message, I clicked Switch To and Retry without 
success.

Strangely, the Windows Task Manager's performance tab did not show a high CPU or 
PF usage,

13. I used ccleaner's registry cleaner in Safe Mode, there's a bunch of stuff related 
to Real player, so I deleted them all and uninstalled realplayer.

- combofix could run again
- ran SdFix but the log that appeared on a normal boot can't be saved as it hanged 
when I chose"Save as.." but I saw the words "Trojan Found.." in the log.
-A Spybot scan showed nothing 

(all the above were done while in Safe Mode)

I'm now in Safe Mode, I can't navigate in normal mode as the system will hang upon 
opening anything.





Responses to this message:
*re: System hijacked by malware? (MartinM: Friday, April 11, 2008 at 9:56 am)
*re: System hijacked by malware? (cc: Friday, April 11, 2008 at 11:17 am)
*re: System hijacked by malware? (Dan Sarandrea, MCSE: Saturday, April 12, 2008 at 9:29 pm)
*re: System hijacked by malware? (Selim Junz: Monday, April 14, 2008 at 1:45 pm)

All messages in this thread [show all]
-System hijacked by malware? (Gill: Fri, Apr 11, 2008, 7:50 am)
-re: System hijacked by malware? (MartinM: Fri, Apr 11, 2008, 9:56 am)
-re: System hijacked by malware? (Gill: Fri, Apr 11, 2008, 1:45 pm)
-re: System hijacked by malware? (MartinM: Fri, Apr 11, 2008, 2:10 pm)
-re: System hijacked by malware? (Gill: Fri, Apr 11, 2008, 6:39 pm)
*re: System hijacked by malware? (MartinM: Sat, Apr 12, 2008, 6:07 am)
-re: System hijacked by malware? (cc: Fri, Apr 11, 2008, 11:17 am)
-re: System hijacked by malware? (Gill: Fri, Apr 11, 2008, 1:37 pm)
-re: System hijacked by malware? (cc: Fri, Apr 11, 2008, 4:06 pm)
-re: System hijacked by malware? (Gill: Fri, Apr 11, 2008, 6:42 pm)
*re: System hijacked by malware? (cc: Sat, Apr 12, 2008, 6:59 am)
-re: System hijacked by malware? (Gill: Fri, Apr 11, 2008, 7:35 pm)
-re: System hijacked by malware? (cc: Sat, Apr 12, 2008, 6:52 am)
*re: System hijacked by malware? (Gill: Sun, Apr 13, 2008, 10:42 am)
-re: System hijacked by malware? (Dan Sarandrea, MCSE: Sat, Apr 12, 2008, 9:29 pm)
*re: System hijacked by malware? (Gill: Sun, Apr 13, 2008, 10:46 am)
*re: System hijacked by malware? (Selim Junz: Mon, Apr 14, 2008, 1:45 pm)
Return to the Windows XP Discussion Forum

All content at Annoyances.org is Copyright © 1995-2008 Creative Elementtm All rights reserved.
Please do not plagiarize; redistributing these pages without permission is strictly prohibited.