Strange Virus....?

Question

I think my computer is infected. I have AVG internet security, fully updated, and did a full scan, but it turned up with nothing. But, when my computer boots up, it deletes all my personal settings and replaces it with xp default. The xp tour icon turns up, my desktop is reset, my appearance, my start menu is reset, everything. I've scanned like 3 times but haven't found anything. I'm using Windows XP. What do I do now?

Answer 1

VIRUS REMOVAL PROCESS:

do this OFFLINE

trash likes to hide in your restore system,so every time you clean up your computer and you use system restore,it restores the trash along with everything else !
turn off system restore:
XP:
start--all programs--accessories--system tools--system restore
check the off box

Vista:

right click computer icon
select properties
select system protection
uncheck os ( c: ) ( system )

alerter & messenger services:
stop messenger spam !!

XP only:
all programs--administrative tools--services
all services are in alphabetical order,right click both alerter & messenger services--select properties--from drop down menu,select disable

Active X:
XP ONLY
internet explorer--tools--internet options--security--advanced
uncheck download unsigned--unsafe--autoprompt

CLEAN UP:

delete history:

XP & Vista:

internet explorer--tools--internet options--general:
click delete history--temp files & cookies
set days to keep history to 0

Prefetch folder:

XP:
start,my computer,disk drive ( c ),windows,prefetch
click view
select "select all"
press delete key on keyboard

Vista:

same thing except my computer is now plain ole computer

Security:

block spyware cookies:
XP:
either from your desktop shortcut or all programs or start page [ lol,MS is all about redundency ]
internet explorer--tools--internet options--privacy--advanced--override
check allow 1st party cookies,block 3rd party [ spyware ] cookies

Vista:

same way as XP

manage your cookies [ with screenshots ]
http://managecookies.diaryland.com

ActiveX:

XP ONLY

internet explorer,tools,internet options,security tab,advanced tab
uncheck download unsigned, not safe & automatic prompt

now return to system restore and select create a new restore point,name the point [ new ? ] and you're set to go

go online and:

download/install/update & run spybot spyware remover,avast anti-virus,regseeker,avg anti-rootkit,rootkit revealer,firefox 2.0.0.4 web browser from

MENU
Acessibility Help,ANTI-ROOTKIT,ANTI-VIRUS,ANTI-SPYWARE,Browser FIREFOX 3.0a5pre
Buddy Browser,a child safe wweb browser for children,CLEAN UP,DESKTOP HELPERS
FIREFOX EXTENSIONS INSTALLED,FIREWALL,Multi Media Files,REGISTRY CLEANERS
SECURITY,Link Checkers,Ect

http://browseraddons.friendpages.com

Answer 2

Run "online scanner", from Karpersky Russia, rated # 1 in the world for virus detections. The scan can take upto two hours depending how many processes you have running and how many programs installed. Allow the complete scan as any virus or viruses found will be killed in real time. After the complete scan reboot your system and you should be okay. No conflict with your existing antivirus.

http://www.kaspersky.com/virusscanner

Minddoctor, France

Answer 3

This does not sound like a virus to me. Instead, it sounds like a problem either in the Windows shutdown or bootup procedures, maybe a corrupted file there that triggers an initial XP default bootup.

I would take this problem to a pro -- or maybe to the person or company that sold you the computer with Windows installed (or whomever sold you Windows that you installed or updated).

Answer 4

Sure does sound like a nasty infection. You can try to use spybot search and destroy it is great for spyware. If nothing turns up get xp reinstalled it is much more painless than hunting for answers on the internet all day.

Answer 5

simple do a bitdefender online scan it's the best because it's got behavior (it deects even the files that behave like viruses)

PS don't use avg it's nr 8 or lower (bitdefender nr 1) I VERIFIED IT

Answer 6

Try a online antivirus scanner and a online anti-adware/malware/spyware scanner in safe mode with network to clean up your computer BEFORE you download anything.
To format you computer and reinstall is the last option.

Turn off system restore before you boot up in safe mode with network to clean your system restore points for viruses, spyware, adware etc.

To get in safe mode tap F8 when booting you computer.
Choose "Safe mode with network".
Go to Start – Run - type iexplore http://www.bitdefender.com/scan8/ie.html Enter(ok).
Do a full system scan. If something is found, delete it, reboot and do the same again in safe mode with network.
When that scan does not find anything you reboot again in safe mode with network.
Go to Start – Run – type iexplore http://www.ewido.net/en/ Enter(ok).
Do a full system scan. If something is found, delete it, reboot and do the same again in safe mode with network.

**NOTE: Do NOT do anything else with your computer when scanning. This because you can start virus/adware/spyware/malware manually.

When no one of these scanners are showing anything you can reboot back to normal mode.
Turn on system restore.
------------------
You need to get one antivirus program, one firewall and some spyware/adware/malware removers if you don't have it.
I use Norton Internet Security (antivirus, spyware, firewall, add blocker, mail spamfilter, pop up blocker etc) Ad Aware, Spybot and more on my desktop running XP Home SP2 with Firefox and Yahoo Toolbar with pop up blocker.
On my laptop i have Ubuntu 7.04. No security needed in Linux, but i use antivirus and firewall. Firefox is standard.
I have no virus, spyware, adware, pop up etc on my computers.

Here are some free programs.
BitDefender Anti-Virus Free.
http://www.bitdefender.com/PRODUCT-14-en--BitDefender-8-Free-Edition.html
Avast Anti-Virus Free.
http://www.avast.com/eng/avast_4_home.html
AVG Anti-Virus Free.
http://free.grisoft.com/doc/2/lng/us/tpl/v5
Avast Virus Cleaner - free virus removal tool.
http://www.avast.com/eng/avast-virus-cleaner.html

Firewall Protection.
ZoneAlarm Firewall Free.
http://www.zonealarm.com/store/content/catalog/products/sku_list_za.jsp?dc=34std&ctry=&lang=nb&lid=trial_zaFamily
Easy-to-use firewall blocks hackers and other unknown threats.
* Systematically identifies hackers and blocks access attempts.
Automatically makes your computer invisible to anyone on the Internet.
Use ZoneAlarm if you normally use Windows Firewall.
Disable Windows Firewall after downloading ZoneAlarm if it's not done automatically.

Ad-Aware 2007 Free.
http://www.lavasoftusa.com/products/ad_aware_free.php
Ad-Aware 2007 Free remains the most popular anti-spyware product for computer users around the world, with nearly one million downloads every week. Our free anti-spyware version provides you with advanced protection against spyware that secretly attaches and takes control of your computer, resulting in aggressive advertising pop-ups, sluggish computer activity, even identity theft through stolen bank details, passwords, and credit card account numbers. If you want real-time scanning capabilities, consider upgrading to Ad-Aware 2007 Plus for real-time protection against spyware, all the time.

SUPERAntiSpyware Free.
http://www.superantispyware.com/

AVG Anti-spyware Free.
http://free.grisoft.com/doc/20/lng/us/tpl/v5

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.safer-networking.org/en/mirrors/index.html

AVG Anti-Rootkit Free.
http://free.grisoft.com/doc/39798/lng/us/tpl/v5
AVG Anti-Rootkit is a powerful tool with state-of-the-art technology for detection and removal of rootkits. rootkits are used to hide the presence of a malicious object like Trojans or keyloggers on your computer. If a threat uses rootkit technology to hide itself it is very hard to find the malware on your PC. AVG Anti-Rootkit gives you the power to find and delete the rootkit and to uncover the threat the rootkit is hiding.

CCleaner is a freeware system optimization and privacy tool. It removes unused files from your system - allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces of your online activities such as your Internet history. But the best part is that it's fast and contains NO spyware or adware.
http://www.ccleaner.com/

ClearAllHistory - clears browser history, cache, cookies, clipboard and remove other computer activity tracks.
http://www.clearallhistory.com/delete-passwords.html

**NOTE: Only have one antivirus program and one firewall installed on your computer.
Anti-adware/malware/spyware are ok to have more of.

Also scan with online scanners sometimes.
http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=00&pkj=VOONYHGBYNCJEIMXQKC&bhcp=1
http://www.bitdefender.com/scan8/ie.html
http://www.ewido.net/en/onlinescan/
http://www.kaspersky.com/virusscanner
http://support.f-secure.com/enu/home/ols.shtml

Also run Windows Updata http://windowsupdate.microsoft.com/
and defragmet you harddisk(s).
How To Analyze and Defragment a Disk in Windows XP
http://support.microsoft.com/kb/305781

Hope this was helpful.
Good luck.
JTB.