Solved Slowing Internet,Slowing Computer,Google hijacked

it succeded but wmp still doesnt work i tried it from everywhere... is there another part of the forum that deals with this i would hate to take away from the people whos computers are still infected

 

Well avg anti virus picked up a new trojan download so im thinking this is a targeted attack being i havent download anything and deleted all p2p software from my cpu... Should i call my isp and change my ip address?

 

Can you provide any details of what was found by AVG?

I rather doubt you have a static IP, so it wouldn't do any good to call your ISP anyway. A targeted attack is unlikely.

Recommend you download and attempt to re-install WMP.

http://www.microsoft.com/windows/windowsmedia/player/download/download.aspx

 

trojan horse agent akye

path C:\system volume information\_restore(bunch of numbers).dll

is this if i restore ill re infect myself?

 

theres a couple more in here too that keep popping up

trojan horse agent ahar

trojan horse agent ahas

all coming from c:\\ system volume infrmation but when i try to look for that folder it isnt there

im not currently having any problems but it seems the _restore is still infected i guess

edit:

windows media player and aol instant messanger wont work every time i clck on em they wound load up when i click on aim it comes up for 2 seconds when i click wmp 11 nothing happens i gave them access in myzonealarmfire wall so that cant be it

when ever i use a diffrent media player to play videos after around 10-15 minutes i get blue screen of death

comp is really messed up wish i had money to get a mac right about now

 

Those are System Restore points, which should have been cleared when ComboFix was uninstalled. Lets do it manually.

Clear past system restore points and create a new one.
Right click My Computer and select Properties. On the System Restore tab, check the box to turn System Restore off. Click Apply. Now, uncheck the box and click Apply to turn System Restore back on. Click OK, then OK to close the System Properties dialog.

Verify a new restore point was created.
Click Start>All Programs>Accessories>System Tools>System Restore
Select 'Restore my computer to an earlier time', then click next.
You should have a newly created System Checkpoint available. If so, click Cancel. If not, click Back and select 'Create a restore point' then click Next. Give the restore point a name and click next.


Did you try re-installing WMP11?

Zone Alarm should not prevent either application from running.

I would recommend you check for driver updates to the Video adapter via the manufacturer's website.

 

tried to dl and re-install didnt work tried to do a fresh install next but
u cant uninstall wmp 11 u can only roll it back...so i rolled it back to wmp 10 and wmp 10 had the same symptoms so then i went back to wmp 11 it didnt work
did the system restore check then uncheck worked fine

but when i click system restore the box is whited out so i googled it found this solution

http://www.techsupportforum.com/microsoft-support/windows-xp-support
/204955-solved-user-accounts-blank-window.html

but it wont work for me every time i try to register dll i get an error message

"dll registerserver in _______.dll failed return code was 0x800004005

so now i cant even verify if the system restore worked this seems to be my only problem left re registering the dlls which i cant to

 

I think the following might help.

This procedure is documented on the Microsoft.com website for resetting registry and system file permissions, as well as default security descriptors. While it might not fix the problem, it should do no harm either.

Download and install SubInACL from Microsoft.

Close out all other programs and open windows.

Highlight and copy the contents of the code box below.

Code:

cd /d  "%ProgramFiles%\Windows Resource Kits\Tools "
subinacl /subkeyreg HKEY_LOCAL_MACHINE\Software /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
subinacl /subkeyreg HKEY_LOCAL_MACHINE\System /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
subinacl /subkeyreg HKEY_CURRENT_USER /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
subinacl /subkeyreg HKEY_CLASSES_ROOT /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
exit
cls

Click Start>Run and type cmd then hit enter to open a command window.
Right click in the command window and select paste.
It will take a while for the commands to process, so please be patient.
The command window should close on it's own when finished.
Reboot for the changes to take effect.


Try registering the dlls again.

 

yessssssssss

system restore check worked

wmp worked everything is back to normal

thank u guys if it wasnt for u i dont know what i would do

 

I'm glad to hear that worked. You're most welcome.

Geri has posted some very helpful information and recommendations regarding future protection in the following link.

http://www.windowsbbs.com/showthread.php?t=67958

Surf safe!