UNSOLVED

04nunhucks

updated

20 years ago

0

04nunhucks

23 Posts

0

4695

April 2nd, 2007 16:00

can't update without BSoD

Hi, I had to format after Windows crippled with spyware (so much for nod32's great protection!). Anyway, after formatting and installing Sophos, loot what I find: Worms Spyware Trojans Anyway. I can't seem to remove it with Sophos, Ad-aware or Spybot even in safe mode. Can anyone advise me what to do on this, but this is not my main problem: If I update with Windows Update, when restarting my computer, I get a BSoD. 0x000007F Any ideas? I am on SP1 and need to update and remove malwa
  • tommyo1954

    1527 Posts

    272

    0

    Posted April 2nd, 2007 16:00

    With that little protection,  there's no telling what has infiltrated your computer. For a system to be that badly crippled with worms, trojans, and spywares, well... that speaks for itself.  Safe and sensible websurfing on the user's part goes a long way too. You can't expect a defenseless computer without proper security  to protect you.....
     
    Good luck cleansing that stuff out.... You actually might just be better off reinstalling XP and starting from scratch; if your pc is actually that botched up as you make it appear.
  • RoHe

    12 Elder

    •

    45230 Posts

    •

    172625 Points

    272

    0

    Posted April 2nd, 2007 16:00

    Don't you have a firewall running? Are some of your personal files infected?

    You likely need to update to SP2 before installing all the microsoft updates and hotfixes. SP1 isn't supported any longer.

    Ron
  • 04nunhucks

    23 Posts

    272

    0

    Posted April 2nd, 2007 17:00

    I do have a firewall: Sophos Client; I seem now only to have the following worms: W32/Sdbot-DCT I am removing that now with Trend Micro HouseCall. All I now need to worry about is a BSoD after updating, hopefully that won't happen. I really would like to update, but I need to ensure my system is malware free before I update. Edit: I have no personal files on the system atm, will put files once I know system is malware free.

    Message Edited by 04nunhucks on 04-02-2007 01:15 PM
  • 04nunhucks

    23 Posts

    272

    0

    Posted April 2nd, 2007 18:00

    i now need to get rid of:
     
    Backdoor.IRCBot.ye
     
    Cannot find info on it.
    Do you know anything about it?
     
    __________________________________________________
    ewido anti-spyware online scanner
      http://www.ewido.net
    __________________________________________________

    Name: TrackingCookie.Skype
    Path: C:\Documents and Settings\04nunhucks\Cookies\04nunhucks@site.skype[1].txt
    Risk: Medium
    Name: TrackingCookie.Skype
    Path: C:\Documents and Settings\04nunhucks\Cookies\04nunhucks@skype[1].txt
    Risk: Medium
    Name: Backdoor.IRCBot.ye
    Path: C:\System Volume Information\_restore{CDEC5DC1-267D-473F-BA0E-04ED93D27034}\RP6\A0002207.exe
    Risk: High
    Name: Backdoor.IRCBot.ye
    Path: C:\System Volume Information\_restore{CDEC5DC1-267D-473F-BA0E-04ED93D27034}\RP6\A0002208.exe
    Risk: High
    Name: Backdoor.IRCBot.ye
    Path: C:\WINDOWS\system32\CTFMOM.0XE
    Risk: High
    Name: Backdoor.IRCBot.ye
    Path: C:\WINDOWS\system32\IEXPLORE.0XE
    Risk: High
     
  • RoHe

    12 Elder

    •

    45230 Posts

    •

    172625 Points

    272

    0

    Posted April 2nd, 2007 19:00

    Grab a free copy of HijackThis from here:
    http://www.bleepingcomputer.com/files/hijackthis.php

    Then post the entire log on Dell's HijackThis forum, here: http://www.dellcommunity.com/supportforums/board?board.id=si_hijack
    Make sure you click the red link at the top of that forum's home page and read the FAQs carefully before posting your logs over there.

    And it sounds like you need something better than your current antiviral and firewall software.

    Ron