Something holding my desktop hostage. Help!

[Kenobi575]

I have a situation where something got past all my security on my desktop and now Norton antivirus won't update, Spybot and System Restore won't open and HijackThis! won't install. Browsing the internet only brings up search pages I've never seen. Summary: Anything that can remove this thing won't run.

I was lucky to find HijackFree and it does run - I have a log file I can post but I thought it best to wait until I get a response and I hope it comes soon - I'm living on my laptop until this is fixed.

I'm running an Emachines W3052 with WinXP Home SP3, 2 GB RAM and 120gb HDD and a 3000+ SMD Sempron Processor.

Hope to hear from you soon....

Thanks,

[Raymond]

Are you able to burn CD from your laptop? If yes, try burning Kaspersky Rescue CD to a CDR and boot your desktop with it. Do a full scan.
http://www.raymond.cc/blog/archives/2008/12/11/13-antivirus-rescue-cds-software-compared-in-search-for-the-best-rescue-disk/

[Ceyfer √]

You have TDSServ.sys symptoms ?
Is ur Pc was infected by roguewares such as Antispyware 2009

Try these steps ( just for minor check-up )

• Click on Start, click Run, and then type devmgmt.msc and click OK
• On the View menu click on Show hidden devices
• Browse to Non-Plug and Play Drivers and you should see something like TDSSserv.sys
• Highlight that driver and right click on it and select DISABLE
• Now RESTART your computer.
• Download a copy of Malwarebytes but DO NOT run it yet.
• Rename the downloaded installer file to any generic name such as your own name but keep the .EXE extension on the file and run it.
• Once the program is installed go to the UPDATE tab and try to update the program if you can.
• Then go to the SCANNER tab and run a Quick Scan and allow MBAM to fix anything found.

*You can also try SuperAntispyware with these steps. Anyway does ur Norton show unresolve threats? then please name it here..

* You can manually update your Norton AV 2009 here
http://www.symantec.com/business/sec...load/index.jsp

[Kenobi575]

I've regained my browser and Norton updates again, The only thing that is having issues right now is Spybot which will not update - it may have been damaged.

after rebooting - Norton had found two items which it quarantined. Is there anything else I need to do to wrap things up/ finish cleanup?

Thank you very much

[Mark]

Well, scan we your PC again with your AV and if Spybot isnt working, try uninstalling it then reboot, then reinstall a fresh copy

[Kenobi575]

I rescanned - came up clean. I reinstalled Spybot and it works now; it looks like their (Spybot) website was down for a short while. All is good now.

It has just completed a scan and found nothing.

I think we got it