avast gone

[Bill]

Hi

Looking for a free fax software I had I installed that is a malware.
Avast doesn't start anymore and can't be started even in the services
window, Same for Zone Alarm and ZSoft Uninstall.

I can't use the Windows "restore to a preceding configuratin "
software, it says that no changes have been made to the system.

I don't see anything strange in Add-Remove Programs.

The only thing I remember is at the installation, there was a program
that asked to execute and it was Qinupgro and there was a another
thign also in the documents settings that asked for execution. If I
told not to execute, the system would not finish loading.

Now I can't go to Internet or even reinstall ZA, Avast or Zsoft
Uninstaller.

The fax was named active fax 3.94

How can I get my system back fast ?

Thanks

 

[Bill]

I forgot to tell, it's a XP pro Sp2

 

[db]

you might try to
boot up in safe
mode and initiate
a system restore
point.

after you reboot
hold down the f8
key to pull up the
boot menu with the
option described
above.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @hotmail.com
"share the nirvana" - dbZen

~~~~~~~~~~~~~~~~~~

 

[Bill]

Did you look in the Event Viewer to see errors that are coming up?

I would uninstall that free fax software because I wouldn't want malware on
my computer.

Maybe that is the problem with your system.

Reboot in Safe Mode and try to run a virus scan.

It sure is, I can't even see it anywhere on the puter it's nowhere
even in the add-remove window.
I looked in the services, all protections are there but disabled and
if cheched enabled they won't start whtn I push "start" in the
services. It returns an error.

I'm copying my critical data on an external disk and I'll try the safe
mode but I thonk it won't pay off since I can't go to internet for
virus updates.

 

[PA Bear [MS MVP]]

There is a very good chance that you are seeing the affects of a hijackware
infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan!

2. WinXP ONLY!! => Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[Bill]

There is a very good chance that you are seeing the affects of a hijackware
infection.

1. See if you can download/run the MSRT manually:http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan!

2. WinXP ONLY!! => Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackwarehttp://aumha.net/viewtopic.php?f=30&t=4075http://mvps.org/winhelp2002/unwanted.htmhttp://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot...tboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance inhttp://spywarehammer.com/simplemachinesforum/index.php?board=10.0,http://forums.spybot.info/forumdisp...m/cleanup,http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Adminhttp://aumha.net
DTS-Lhttp://dts-l.net/

I can't go on the internet. None of the 5 browsers installed can go.
Internet is blocked.

 

[Elmo]

I can't go on the internet. None of the 5 browsers installed can go.
Internet is blocked.

Download one of these to another computer and save to a thumb drive.
Start up the infected machine in Safe Mode, install and run the
programs. (Inserting a thumb drive into your infected machine can cause
the file Autorun.inf to be installed on the thumb drive, and then to any
machine that uses the drive. So leave the drive plugged in during the
repair.

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html

Here are a few things to try to get Internet access back:

Open Internet Options, Connections tab, click "Lan Settings" button,
deselect all.

Flush DNS

Click Start, Run, type CMD and click the [OK] button. Type each of the
following:

IPConfig /FlushDNS [Press Enter key]
ipconfig /release [Press Enter key]
ipconfig /renew [Press Enter key]
ipconfig /registerdns [Press Enter key]

NETSH

Click Start, Run, type CMD and click the [OK] button. Type the following:

netsh winsock reset

Press Enter key

Restart the system

You can also try this software download from a working machine:

LSP-Fix
http://www.cexx.org/lspfix.htm