Total Mess, thanks to WinAntiSpy

jhenryjhenry California's Wine Country
edited September 2007 in Spyware & Virus Removal
My gram's computer reached it's limit today, and it's pretty flucked up.

What started as a popup turned into WinAS installing itself, then blocking access to the control panel, symantec.com, windows update, and just about all of my typical "get rid of s%$^" sites. I've installed S:S+D, Defender, Avast, and have Windows Firewall going.

Msconfig was able to disable the startup entries, and it the computer runs okay now, but there are a ton of things wrong still.

I can't get into control panel, I can't change ANY settings, even display settings. It says an administrator disabled access. Logged into safe mode and tried to open gpedit.msc like the MS Update site said to do, file is missing. I'm not quite sure what to do, short of plopping the disk into one of my computers and copying essential files and reformatting.

It's Windows XP SP2 on an Emachines something or other with a Celeron D 390

I'm at a loss here, never worked with anything this serious.

Comments

  • Baabiouz
    edited August 2007
    Hi jhenry! And welcome to icrontic.com :)

    Let's start with downloading HijackThis.
    Here are istructions.

    Please download the latest version of HijackThis from the following link:

    HijackThis Download Site

    To use HijackThis, download the file and extract it to a directory on your hard drive called c:\HijackThis. Then navigate to that directory and double-click on the hijackthis.exe file. When the program is started click on the Scan button and then the Save Log button to create a log of your information.

    Please, post that hijackthis log back here :)
  • jhenryjhenry California's Wine Country
    edited August 2007
    Thanks for the welcome, but I've been here awhile. I've even got two of my own bytes... lol

    I'll download HjT later and post the results.

    Thanks
    John
  • Baabiouz
    edited August 2007
    Oh i'm sorry, i didn't see that you have "155 Posts" :D
  • TroganTrogan London, UK
    edited September 2007
    Whilst we appreciate that you may be busy, it has been 7 days or more since we heard from you. This topic is now closed.

    Infections can change and fresh instructions will now need to be given. If you wish to reopen your topic, please send a Private Message (PM) to Trogan with a link to your thread.

    If you are not the user who started this thread, you must start your own Thread instead :)
This discussion has been closed.