[dtakehana]

Hi, I am having an issue with my laptop after I ran the AVG antivirus last night. Apparently there were some files infected with the virus Trojan horse PSW.OnlineGames.AZ, and some system files were infected with it, and the antivirus program had to delete them. Then when I was trying to explore any of the drivers in my computer (C:, D: or the external hard drivers) I get this message from Windows asking me to choose a program from the list in order to view the files. There are no suitable program I can choose from anyway. And this is not the normal WIndows procedure when you simply double click the drivers´ icon to view its contents is it??
I have included a screen shot of the situation, a report with the antivirus results and a hijackthis log (in case you need it?)
Thank you very much for your attention and help!
Much appreciated

Attached Files

•  screenshot.doc   119.5KB   64 downloads
•  avg_report_results_17.4.doc   52.5KB   107 downloads
•  hijackthis_18.4.2008.txt   7.77KB   133 downloads

[Advertisements]

You can check your system files with sfc /scannow.
Be sure to put a space between the c and the /.

If you have an XP cd do this-

Put the XP disc in the cd drive and follow these steps.

To run the System File Checker, follow these steps:
1. Click Start, click Run type sfc /scannow, and then press ENTER.
2. Follow the prompts throughout the System File Checker process.
3. Restart the computer when System File Checker process is complete.

(last 4 lines copied and pasted from SRX660, thanks)

[cmpm]

You can check your system files with sfc /scannow.
Be sure to put a space between the c and the /.

If you have an XP cd do this-

Put the XP disc in the cd drive and follow these steps.

To run the System File Checker, follow these steps:
1. Click Start, click Run type sfc /scannow, and then press ENTER.
2. Follow the prompts throughout the System File Checker process.
3. Restart the computer when System File Checker process is complete.

(last 4 lines copied and pasted from SRX660, thanks)

[Ztruker]

Try the Drive association fix from the Doug Knox site.

http://www.dougknox..../file_assoc.htm ... Drive Association Fix (Restores default settings for hard drives)

[dtakehana]

Hi all.
Thanks for your both replies. I tried to do what CMPM suggested but no success. Then tried to do Ztruker´s suggestion but I am not so sure where I should extract the file to. Either way, I decided to put the file to my desktop since I cannot access any hard drive at the moment. No success as yet... Any other suggestions? thank you very much, very appreciated !!

[Mr Freeze]

are you running adaware 2007
you could try this

To fix this, open task manager (Ctrl-Alt-Del) and click on file - new task while holding down the control key.
This will bring up a cmd console. From there type regedit.exe and the registry editor should open.
If you have got this far, all is going good
Go to this webpage:

http://www.dougknox..../file_assoc.htm

Here you will find lots of registry files to restore the file associations.
Download the ones you need and import them into the registry through registry editor.
This should fix your PC enough so you can perform a repair or system restore.

In all reality, the only full solution is a format and re-installation of Windows here, or a full restore from a backup image (e.g. a brand name PC's recovery disk).

Adaware 2007 removes .exe files and could cause this problem

[cmpm]

Are you saying Adaware removed the file by way of removing ad stuff or when it was installed? I know you said 'could' Mr. Freeze. so it possibly didn't.

Anyway I thought uninstall Adaware should replace any file it removed when installed.
Or if it does backups, that could be restored.

dtakehana,

System File Checker should have worked.
sfc /scannow
As well as Ztrucker's reply.
And the way Mr. Freeze is saying to fix your registry.

Although you cannot access the drive, these ways can.

[Mr Freeze]

Are you saying Adaware removed the file by way of removing ad stuff or when it was installed? I know you said 'could' Mr. Freeze. so it possibly didn't.

Anyway I thought uninstall Adaware should replace any file it removed when installed.
Or if it does backups, that could be restored.

dtakehana,

System File Checker should have worked.
sfc /scannow
As well as Ztrucker's reply.
And the way Mr. Freeze is saying to fix your registry.

Although you cannot access the drive, these ways can.

Adaware 2007 is removing .exe files it could be detecting some sort of infection or corruption with the file
heres the link to a site that Adaware 2007 was the problem

http://www.bleepingc...opic137680.html

If you have any restore dates you could do a system restore
i used to like Adaware SE once they stop updating it i never used it again
Spy Sweeper was supposed to be good...but it turn out to be a resource hog
Superantivirus was another one but its .exe file got infected with some sort of trojan

AVG Antispyware is so far the most dependable one

Check your antivirus program and see if it has backups
if it does perhaps a trip to the malware forum is a good idea

Edited by Mr Freeze, 19 April 2008 - 09:30 AM.

[dtakehana]

Hi there,
Sorry I didn´t use ADAWARE but AVG Antiware 7.5. ..
I am trying again CMPM´s suggestion, and also Ztrucker´s. I will post a reply as soon as I get these done.
Thanks! :-)

[Mr Freeze]

hope the other fixes are a solution to your problem

[dtakehana]

Hi!
I did the suggestions all over again but with no success.Also I don´t have a direct Windows XT CD, like CMPD suggested me to do, but the System CD which contains all the Win XT files, among other stuff pertinent to the machine. The AVG only gives the option to restore the infected files from its Virus Vault. My question at this stage is - which files should I restore? And how dangerous that could be if I restore these files, as they are infected? Thanks again!

[cmpm]

I would not restore any antivirus backups.

Did you try the command to for System File Checker anyway?
It doesn't need a cd if you have a recovery partition.
In fact it will run with out any XP until it sees it needs a file and then prompt you for it.

[Mr Freeze]

My question at this stage is - which files should I restore? And how dangerous that could be if I restore these files, as they are infected?

Very good question....A malware expert should be able to help answer that.

did you try going to your control panel click on folder optionsunder the general tab..press restore defaults...then the view tab....restore defaults
then restart your computer

keep your virus vault the way it is
dont delete or remove anything from it a malware expert can help you restore those files

[dtakehana]

I would not restore any antivirus backups.

Did you try the command to for System File Checker anyway?
It doesn't need a cd if you have a recovery partition.
In fact it will run with out any XP until it sees it needs a file and then prompt you for it.

Yes CMPM I tried exactly how you suggested... No luck.

[cmpm]

hmmm bummer....

Try what Mr. Freeze just now suggested.

hope you can get the answer from someone

Try this if that don't work-

Uninstall your controllers from device manager.
To do this, Open-
Control Panel (classic view)
System
Hardware tab
Device Manager button
Click on Ide ATA/ATAPI controllers
Right click Primary IDE controller and uninstall
Do the same for the secondary controller
then restart your computer
Your system will reinstall these drives with the correct drivers.
And hopefully resolve any conflicts.

[dtakehana]

Hi CMPM!
Well I tried both: Mr Freeze and your advice. No success yet. Should I seek for a Malvare expert´s advice or do you have still any ideas? It would be much appreciated!
Thanks a lot for your patience and help!
D