Jump to content


Photo

Parasite terminating Spybot, Hijackthis, etc. on WinXP PC


  • This topic is locked This topic is locked
1 reply to this topic

#1 smspiffy

smspiffy

    Member

  • New Member
  • Pip
  • 1 posts

Posted 12 January 2008 - 02:03 AM

WinXP SP2 machine infected with unknown parasite which cleverly terminates Spybot, Hijackthis, SAV, Kapersky, etc. By this I mean when executing the application it simply ceases to function with no error message. They just disappear. The same occurs when attempting to install Spybot 1.5; specifically, the language selection option appears and after selecting English it terminates.

Parasite also closes Firefox and IE browsers when any of the above application names are searched. All of these behaviors are exhibited when booted in safe mode. msconfig is available but removing nearly every non-Microsoft related service has not eliminated this parasite from loading.

I had SAV installed and updated daily. It found nothing on a full system scan. I then installed Norton 360 in its place (which required that SAV be uninstalled) and it was unable to complete a full system scan. It simply hung up at an unrelated location twice. Now SAV cannot be installed. The parasite simply terminates the install as well as the install of Kapersky.

I have attempted to scan with Spybot using The Ultimate Boot CD for Windows, ver. 3.1. Spybot yielded some cookies and two registry changes “NoDispAppearancePage.” Repairing these issues did not resolve the issue. However, upon reboot the “NoDispAppearancePage” registry changes are again caught when running Spybot from The Ultimate Boot CD. Other program scans (Ad-Aware, McAfee Stinger) have yielded no clues.

I could reformat and reinstall but I am very interested in determining the root cause of this infection.

I am able to run Security Task Manager but I have been unable to terminate the process which is linked to the parasite.

I have also posted on the Spybot forum but unfortunately I have not received a response for several days. I take that to mean there may be no hope for me but before I reformat I wanted to seek a second expert opinion. Any help you can provide would be most welcomed.

#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,523 posts

Posted 14 January 2008 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button