Hi -
I have a system that I know has some sort of virus or is in some way 
hijacked but I can't find the problem.  The only way I know it is still 
hijacked is that I can no longer access Windows updates.  I can try through 
control panel or by going directly to the site.  Always says page cannot be 
displayed.

This is a Windows XP Pro SP3 system.  I've run full scans with Malwarebytes 
and Avira.  Have also run HijackThis and fixed anything that seemed 
suspicious.  This is the second system this has happened to me on.  The last 
one I gave up finally and just reinstalled the OS.  Has anyone else 
experienced the same problem and found a solution?

Thank you!!!!! 

I should add to the note that I have tried system restore and it won't work. 
Acts like it is going to restore then after the system restarts it says it 
could not restore.  Have tried it with multiple restore dates and none work.

I've also run everything in Safe Mode and same results.

Thanks again :)

"Michael" <mba2@charterinternet.com> wrote in message 
news:BTrXn.11174$YX3.1416@newsfe18.iad...
> Hi -
> I have a system that I know has some sort of virus or is in some way 
> hijacked but I can't find the problem.  The only way I know it is still 
> hijacked is that I can no longer access Windows updates.  I can try 
> through control panel or by going directly to the site.  Always says page 
> cannot be displayed.
>
> This is a Windows XP Pro SP3 system.  I've run full scans with 
> Malwarebytes and Avira.  Have also run HijackThis and fixed anything that 
> seemed suspicious.  This is the second system this has happened to me on. 
> The last one I gave up finally and just reinstalled the OS.  Has anyone 
> else experienced the same problem and found a solution?
>
> Thank you!!!!!
> 

Was the computer fully-patched at Windows Update when the computer got 
infected?

Was Avira AntiVir installed before or after the computer got infected?

Has a Norton or McAfee application ever been installed on the computer 
(e.g., a free-trial version that came preinstalled when you bought it)?

The above notwithstanding...

NB: If you had no anti-virus application installed or the subscription had 
expired *when the machine first got infected* and/or your subscription has 
since expired and/or the machine's not been kept fully-patched at Windows 
Update, don't waste your time with any of the below: Format & reinstall 
Windows.  A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in 
dealing with malware infections such as viruses, spyware (including unwanted 
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page: 
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually: 
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan!  You may need to download the 
MSRT on a non-infected machine, then transfer MRT.EXE to the infected 
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!) 
in Safe Mode with Networking, if need be: 
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead: 
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested logs in an appropriate forum for assistance by an 
expert in such matters. DO NOT SKIP THIS STEP!!

I can recommend the expert assistance offered in these forums: 
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0, 
http://www.spywarewarrior.com/viewforum.php?f=5, 
http://www.dslreports.com/forum/cleanup, 
http://www.bluetack.co.uk/forums/index.php, and 
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting 
this isn't your cup of tea - take the machine to a local, reputable and 
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

NB: This newsgroup was scheduled to be removed from the MS newsserver on 01 
July.  How long it'll still be available (via the MS newsserver) is anyone's 
guess.
-- 
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Michael wrote:
> I should add to the note that I have tried system restore and it won't 
> work.
> Acts like it is going to restore then after the system restarts it says it
> could not restore.  Have tried it with multiple restore dates and none 
> work.
>
> I've also run everything in Safe Mode and same results.
>
>> I have a system that I know has some sort of virus or is in some way
>> hijacked but I can't find the problem.  The only way I know it is still
>> hijacked is that I can no longer access Windows updates.  I can try
>> through control panel or by going directly to the site.  Always says page
>> cannot be displayed.
>>
>> This is a Windows XP Pro SP3 system.  I've run full scans with
>> Malwarebytes and Avira.  Have also run HijackThis and fixed anything that
>> seemed suspicious.  This is the second system this has happened to me on.
>> The last one I gave up finally and just reinstalled the OS.  Has anyone
>> else experienced the same problem and found a solution?