No update because of trojan - msqpdxserv.sys

I finally found out why I kept being redirected when I tried to access
Microsoft updates. I had noticed that my automatic updates hadn't been
happening. So when I saw that two or three weeks ago I sent problem reports
to Microsoft and the usual message I always get said the problem would be
evaluated and an answer was soon to come. It never did..... so I downloaded
every super malware app I could find. I ran them all and it did no good. I
had popups like crazy and kept being redirected from websites to Google or
one of those obnoxious Vimax ad sites or another of the ad sites that Google
is paid to allow on Google Search.

Before I am redirected from here again, I want to tell you all the name of
the trojan and some info to rid yourselves of it. It's a rootkit and it
infected my machine at C:\Windows\system32\drivers\msqpdxserv.sys I found
exactly where and what it was by searching the web for "redirect" and by
downloading a free program: GMER which is a great and apparently strong force
for this sort of thing. I was able to detach it from its perch on one of my
unused, and hidden plug and play drivers in Device Manager.

It loads up and is hidden so few programs can find it. I'm going to look for
the website that gives the fix, but I may not be back if it catches me. I
thought I was rid of it an hour ago, but it creates clones with different
names. I'm going to post this and I'll try to come back with the website.....
we can do this people!!!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

wrote:
> I finally found out why I kept being redirected when I tried to access
> Microsoft updates. I had noticed that my automatic updates hadn't been
> happening. So when I saw that two or three weeks ago I sent problem
> reports
> to Microsoft and the usual message I always get said the problem would be
> evaluated and an answer was soon to come. It never did..... so I
> downloaded
> every super malware app I could find. I ran them all and it did no good. I
> had popups like crazy and kept being redirected from websites to Google or
> one of those obnoxious Vimax ad sites or another of the ad sites that
> Google
> is paid to allow on Google Search.
>
> Before I am redirected from here again, I want to tell you all the name of
> the trojan and some info to rid yourselves of it. It's a rootkit and it
> infected my machine at C:\Windows\system32\drivers\msqpdxserv.sys I found
> exactly where and what it was by searching the web for "redirect" and by
> downloading a free program: GMER which is a great and apparently strong
> force for this sort of thing. I was able to detach it from its perch on
> one
> of my unused, and hidden plug and play drivers in Device Manager.
>
> It loads up and is hidden so few programs can find it. I'm going to look
> for
> the website that gives the fix, but I may not be back if it catches me. I
> thought I was rid of it an hour ago, but it creates clones with different
> names. I'm going to post this and I'll try to come back with the
> website..... we can do this people!!!