On Tue, 10 Feb 2009 23:06:01 -0800,
wrote:
> I just wrote a long message about the problem we're having updating or even
> getting onto the microsoft update site, but an "error" occured and it was
> lost. I am going to post my email address so if this does get though you can
> write me there for the info:
>
> The name of the trojan is msqpdxserv.sys and it redirects your moves away
> from any place that might help you defeat it. Hope this goes through.....
Preferred practice is to 'flatten' and rebuild a computer that has been
exposed to malware.
http://www.microsoft.com/technet/com...mt/sm0504.mspx
It is defenitely advantageous to create an 'image' of the operating system
and create a data/file backup of the affected PC.
The image can then restored to the impacted PC and the user's data/file is
subsequently restored to the operating system.
An experienced and properly prepared user can do that in substantial less
time than scanning with complex and sophisticated AV applications.
Alas, since many users are less prepared and/or lacking the experience;
Scanning with an AV apps. is the only option, unless the user consults a
computer technician.
A guide and tutorial on using ComboFix
http://www.bleepingcomputer.com/comb...o-use-combofix
http://www.thespykiller.co.uk/index.php?board=3.0
*(ComboFix should not be used without guided assistance.)*
GMER - is an application that detects and removes rootkits.
http://www.gmer.net/index.php
For additional assistance in relation GMER scan results consult either
http://www.thespykiller.co.uk/index.php?board=3.0
--or--
http://antirootkit.com/forums/index....81ffe4361c3a17