Gogero said:
Hi Thanks for your respone
Microsoft Essentials after an update apparently did remove the XPGuardian
hoax/infection. However there seems to be some damage left behind..I cannot
access many of my programs like I used to. eg clicking on ADD OR REMOVE
PROGRAMs I get this center screen saying...
C:\Windows\System32\rundll\\32.exe
Is that C:\Windows\System32\rundll32.exe actually?
Application Not Found.
Other programs like Word and Access. message appears App NoT Found.
Other programs ask "What program do you want to open this file" and give 15
options.. have tried a couple don't know which to click on.. to no avail. e.g.
my Canon Zoom browser won't open. Same with SuperantiSpyware.. don't know
which option to open with.. this never happened before.. I would just click
and it would open.
How serious and what to do? Do I need to do a system restore or Hijackthis
or what? Please help. Thanks.
Gogero
original message below
Hi,
I have had this XPGuardian 2010 hoax invade my laptop the other day. I
removed it with a Microsoft Essentials update. However, though things seem to
working fine, some things are odd. e.g., when I try to access 'Add or Remove
Programs' the following center screen appears
C:\ Windows \ system 32 \ rundll32.exe
Is that C:\Windows\System32\rundll32.exe actually?
Application not found.
Some Microsoft programs like Word and Access see the same, app not found.
Gogero.
Download this Avira Antivir Rescue System program to a working machine.
It will burn a CD image to a blank CD. It's updated a few times per
day. Insert the CD into the damaged machine and let it do a scan of
your system. Before starting the scan, select "Configuration" and set
to repair or rename the infected files. Sometimes your machine won't
restart after such a repair process, so you might want to save needed
files to another system before using this. If you can't, then you can
move the hard drive to another machine to copy needed files. You can do
that before, or after this scan.
http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html
Then run these:
Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html
You can try some of the CD's mentioned at the following site.
BitDefender was my favorite, but if the infected machine can't connect
to the internet to get updates, Avira comes with current virus
definitions. Also, some of these just won't run on some systems,
perhaps because there's no drivers available for some system devices,
motherboard, graphics card, etc. So try a few of these till you find
one that works:
Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:
http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).
After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.
