Virus seems to be blocking access to security sites..

[bledd]

Cleaning a pc for a friend, (only last week I gave it back to him, freshly formatted, but I didn't bother taking an image -why?!?!??)

he's managed to nail it, big time

the clock says 'VIRUS ALERT' next to the time in his user account, and no user accounts can access updates like spybot updates, or nod32 updates (they seem blocked)

where can i check? i've tried super antispyware, spybot, nod32, avg antispyware

but none of them can access their update pages. hjt log is clean.

hosts file is clean too, any ideas before I format?

 

[bledd]

sorry, it's XP SP3

even if it was Vista, any pc i've fixed, the user said "something came up, i just clicked 'ok/allow'" :/

 

[bledd]

that fails to accept it's update server too

 

[bledd]

cheers

will run combofix tonight, if that fails, i'll just install xp again and hand it back to him

at the moment, my trusty old..

--

try this..

disable system restore
remove whatever av you've got now

run..

ccleaner slim
nod32 av trial
spybot s&d
adaware
avg antispyware (remove this after)

put firefox on with adblock plus and Easylist subscription (do this on your pc too)

shotgun blast approach, but usually works!

---

seems to be failing , need to add more to the list i guess

 

[bledd]

cheers

 

[bledd]

i keep images for every pc i fix, but this time i figured 'nah, i'll play COH instead'

 

[bledd]

hmm, looks like something good to run if there's kids on the machine and the parents want to limit things

i might go with the spybot resident thing, or perhaps defender, for this guy

 

[bledd]

bledd here lies the route to salvation...

1. Disable system restore.
2. Download and run combofix, preferably from safemode but ive used it in normal mode befpore with success http://www.bleepingcomputer.com/combofix/how-to-use-combofix
3. Post a Hijackthis log for us to look at http://www.whatthetech.com/hijackthis/

Those two apps alone should sort you out, I was absolutely amazed by combofix when I ran it, very impressive little tool!

holy #### balls, comodofix is the daddy, it's just a glorified bat file with a few small apps wrapped inside it, but damn it works well!

don't think i'll need to format after all

 

[bledd]

HJT is clean, will post it tonight anyway

can't believe how effective that comodofix was..

 

[bledd]

couldn't find them for.. super antispyware, nod32 trial

 

[bledd]

spellingfix

 

[bledd]

just run through all the programs, they're a general 'fix all' for pc problems, ignore bits like the clock etc

 

[bledd]

for christ sake, read what i'm typing!

http://forums.overclockers.co.uk/showpost.php?p=12612621&postcount=9

 

[bledd]