regedit, safeboot taskmanager, internetconnection

[oxforddian]

Hi everyone,
i have some infection that has disabled regedit, taskmanager, internet connection, safeboot and avg, spybot etc. one of the applications that has the same name as adsl starter keeps on coming up trying to access floppy, i guess it is the virus with a changed name. the usb was also disabled but i upgraded xp and it is now working.
any ideas?

[YuMeng]

you upgraded or reformat and upgrade?

[Kees]

1.start in safemode and scan for viruses with Kaspersky AV Toolkit.
2. make a rescuedisk (Kaspersky website) and boot from there, scanning for viruses.
3. if none of these works, put back an image of your primary active partion (presumably C)
4. as last resort: reformat and do a clean install.

BTW what do you mean with upgrade? Are you talking about updates, i.e. long overdue security patches?

[oxforddian]

Hi dude,
I cannot do a safe mode, it has cleverly it.
By upgrade i meant putting xp cd in the running it which searches and does what it calls an upgrading the system.

How do i do an image of C: where to? USB? I only have one partition, C. If I am to do a reformat I guess that is in cmd format C: ?? but how do i keep my personal files?

thanks guys u r being helpful. i need a bit more guidance.

[Sai Charan]

oxforddian,

DiskHeal or RRT can restore Task Manager, Regedit and Folder Options disabled by Virus

[oxforddian]

i will try diskheal rrt did not work.
i get a win32 sality gen worm when i scan with avast. i command the delete but appears again during the scan.

[Raymond]

Download and install Kaspersky Virus Removal Tool to clean your computer from any virus. Once you've done that, use either DiskHeal or RRT suggested by Sai Charan to enable the disabled Task Manager, Regedit and etc...
http://dnl-eu14.kaspersky-labs.com/devbuilds/AVPTool/

[oxforddian]

kasper is running and has found a few win32.sality.aa worms. it says they are disinfected. there is also a win32.delf on the recycler on usb stick and c drive. it did not clean and asked to reboot and now it has rebooted by the screen is blank with the cursor blinking, does that mean it is running th AV?
another question, how do i keep a new usb clean?

[brayden]

get a USB with read only switch. i've had infections on my USB stick before. one of them was AVG :P haha well anyway with a good anti-virus it will pick up the viruses.

[oxforddian]

thanks raymond.
it is still running, found 51 win32salityaa and downloaderJStabletka.a
I will let you know if it is fixed so that the expereicne may help others.
i went to bullguard and for 3 days they kept on asking me to post my hijackthis and other registry readers which came to nothing.
thanks again