Too many viruses

Hewlett-packard Pavilion dv1310us notebo...
October 6, 2009 at 10:24:17
Specs: Windows XP Home SP3
Ok am needing a bit of help here. My son's laptop picked up a virus sometime in August as best I can tell. It managed to disable windows live onecare. He shut it down in Septemberwhen it began acting funny so it has been turned off until I got the time on Sunday Ocober 4 to start working on it.
Problems were slower than usual runnung, lost desktop (I could see it during startup but after a couple minutes it would disappear) extra shortcut to internet explorer kept getting put on desktop, something called security tools kept appearing on desktop and in quick launch, Could not go to Microsoft sites, could not use windows update, kept shutting down internet explorer when I would try and use online scanners from windows live and trendmicro house call. Finally got the windows live online scan to work and fixed or removed about 150 causes and issues, didn't think to save a log. still had trouble with IE redirect, pop ups and pop unders advertising LA News, and various security software.
Got it to do a housecall scan finally found a few more issues again I didn't think to save a log. Still problems. DL and install Kaspersky free trial and scanned last night found 13 more issues/threats. fixed or quarantined.
Stil think there is something hiding out. There are a lot of registry keys that I don't think are legit, found one with dummy listed as the value?
I will reformat and reinstall if needed but didn't want to do that until I could be sure there was nothing that could come back.
Sorry to be so long winded here but am lost after 2 days of working only to suspect there is still something hiding and I don't trust myself to delete registry keys and values that I am not sure about. I did remove those that I knew for sure were not supposed to be there.
So I would greatly appreciate any help or ideas I can get.
Thank you in advance.

See More: Too many viruses

Report •

October 16, 2009 at 10:09:12
Could be hidden malware and/or a rootkit infection.

In safe mode, download the following programs:

MalwareBytes Anti-Malware (
Dr. Web CureIt Free (
and OTListIT2 (

Save these to your desktop. While still in safe mode, install and run MalwareBytes. It should scan your system. Clean/remove any threats found. if it asks to reboot, do it.

When the system reboots, go into safe mode again and run Dr. Web. Let it do a quick scan and clean any infections found. Reboot again.

Try to enter into normal windows mode this time. If you are able to get into windows under normal mode, try running Dr. Web again.

If there are no further infections detected, run another MalwareBytes scan. If it too comes up clean, then you should be ok.

If either scan comes up with problems, clean/remove them, reboot again, and do another scan.

If the same items keep showing up on the scans or if you still cannot boot into normal windows mode, run OTListIt2 and copy/paste the 2 logs back here so we can see what kind of infection you have.

Please let me know BEFORE you start this if you have any questions or if you don't understand something.

I do this in my spare time, so please understand that I may not be able to respond quickly to your posts, but I will follow up as soon as possible. Thanks!

MOS Master Certified
MCP Certified
CCNA Certificate Pending
A+ Certificate Pending

"I have gone to find myself. If I get back before I return, please tell myself to wait." :

Report •

November 3, 2009 at 23:17:56

some viruses can work alongside spyware to make detection and removal extremely difficult. You should delete all temp files and also use registry cleaner to clear most of the Internet clutter because it involves the use of different applications that do a large bulk of the work in malware or spyware detection. How To Fix DLL Errors

Report •

Related Solutions

Ask Question