problems after yourprotection infection

[drewroof]

hi, any one had this malware on your pc?
i have just had it and now cant connect to windows update to update whatever i had to get rid of,
am running xp ie8 sp3,
had the yourprotection spyware/malware infection,
think i got rid of it by running malware anti-malware programme and some other programmes according to the website, have reinstalled avast,spybot and microsoft security essentials all of which say no more infetction, both in normal and safe mode
when i click on the windows update via the saftey button the webpage says i not connected to the interweb,
if i navigate to the update site via windows home it says there is a problem with this site and cant updte windows
i also have some sites which arnt the site i click on in google,ie if i type antimalware and the list of sites come up which i want, i click on it and sometimes it will send me to a shopping comparision (sp) site and am getting pop ups as well now

please help as its driving me potty
think a reformat is a last resort

thanks for your time

 

[dave.m]

It sounds like your computer is not yet clear of all the malware.

1st thing to do is clear out all your temporary files, tool of choice is ATF Cleaner, it is free and you do not have to install it. Download and instructions here (Windows XP, 2K, 2003 & Vista ONLY)
* NOTE : If you would like to keep your saved passwords, click No at the prompt.

-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected - > OK

If you use Firefox browser, do this also:

* Click Firefox at the top and choose Select All from the list.
* Click the Empty Selected button.


Then, please download MalwareBytes' AntiMalware using the BLUE button for the FREE version.


* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to the following:

o Update Malwarebytes' Anti-Malware
o Launch Malwarebytes' Anti-Malware

* Then click Finish

If an update is found, it will download and install the latest version.

* Once the program has loaded, select > Perform Quick Scan, then click > Scan.
* When the scan is complete, click > OK, then > Show Results to view the results.
* Be sure that everything is checked, and click > Remove Selected.
* When completed, a log will open in Notepad. Save this log to My Documents in case it is needed for reference.
Reboot as required.


Post back when that is done, or if you encounter any problems.

dave

 

[empip]

http://www.myantispyware.com/2010/04/02/how-to-remove-your-protection-uninstall-instructions/

The above web page doesn't appear to ask one to download anything suspicious when following... How to remove 'Your Protection' (Uninstall instructions)-
ie.
MBAM and HiJackThis ... we know these to be useful progs.

'TDSSKiller' a free utility from Kaspersky, itself a respected producer of AV/AM progs...

Worth a try if you believe you are suffering the above infection.

-o-

 

[drewroof]

hi,
ran atf and malware thingy again,
malware reported 1 infection so deleted it,

restarted, still couldnt update windows so ran tdsskiller
reported that 1 file was infected and need to restart to clean so did,

made a coffee while it restarted and it still the same!!

drank said coffee, backed up photos and drivers,

got 1 windows xp disc and threw it in,

fortmatted c: drive

now owner of sparkley new installed version of xp


gonna have to update everything again
thanks for your help and sorry we couldnt see the conclusion happen
but got fed up of it
Drew