Tech Support Forum - View Single Post

DarkMagician66 · 11-07-2008, 02:56 AM

Hello, I believe (know) that my XP Home system security was compromised and the symptoms initially were Explorer crashes and restarts, desktop and toolbars vanish and reappear and regedit is disabled. Also the Kaspersky Internet Security signature update has been blocked and svchost connections multiply rapidly (still have access to Task Manager but most programs that are opened disappear / crash so it's difficult to run anything at present). I have removed the HDDs and docked them to a laptop via USB, disabling autorun prior to plugging them in, so that I could scan them. SuperAntiSpyware running on the laptop detected over 300 problems during it's scan, and envoked AVG to identify more than 12 trojans / worms including 3 Vundo variants and a couple of root kits. These were cleaned from the HDDs but I am now worried that there are registry entries that will bring them back if I boot the drives up again in the original system. Where do I go from here? Thanks.

11-07-2008, 02:56 AM	#1 (permalink)
DarkMagician66 Registered User Join Date: Nov 2008 Location: London, England, UK Posts: 9 OS: XP Home My System	Trying to access malware infected drive Hello, I believe (know) that my XP Home system security was compromised and the symptoms initially were Explorer crashes and restarts, desktop and toolbars vanish and reappear and regedit is disabled. Also the Kaspersky Internet Security signature update has been blocked and svchost connections multiply rapidly (still have access to Task Manager but most programs that are opened disappear / crash so it's difficult to run anything at present). I have removed the HDDs and docked them to a laptop via USB, disabling autorun prior to plugging them in, so that I could scan them. SuperAntiSpyware running on the laptop detected over 300 problems during it's scan, and envoked AVG to identify more than 12 trojans / worms including 3 Vundo variants and a couple of root kits. These were cleaned from the HDDs but I am now worried that there are registry entries that will bring them back if I boot the drives up again in the original system. Where do I go from here? Thanks.