I gone through "read me first" for this section and seems that I can't do anything.
Here is the problem and the things I tried to solve my problem.
The first encounter with the virus was when I tried to start gtalk (4-5 days ago), and a window poped up saying 'select the program you want to use to open this file' (you all must be familiar with this msg, it comes when we try to open something windows doesn't recognize).
I inquired and got to know that my cousin brought some files from some internet cafe which
caused the problem. I still don't know what files he brought. I looked for suspicious looking programs and files so I found some unusual things some of which i remember.
- driveguard.exe running in task manager
- a folder named driveguard in "C:/Program Files" containing driveguard.exe and a text file which i deleted instantly. so no information on them too
- I also felt a process wuauclt.exe which is still running in my task manager (it re-initialize it by itself when i stop/end it) is also a virus (i am a newbie)
- and some other process which i don't remember, I stopped (ended) them.
Then i tried opening gtalk again and same msg. similarly with other programs. I downloaded an open source antivirus from www.clamwin.com and found that i can't even install anything.
I tried gtalk (and other programs) by right clicking and selecting "run as". I could run every program. So I again tried installing by this method but again i got "access is denied".
when I select "run as" it gives me two option, namely - 1. run as current user 2. run as administrator, but my account had admin rights (this is the only account on login screen) , and when i installed windows XP i didn't create any other account by name "administrator".
so I tried creating another account with admin rights, when clicked on user accounts(in control panel) it said rundll32.exe not found, but its there. same msg for add n remove programs etc.
I tried to scan my computer from Kaspersky website and it detected 3 viruses namely
rundll32.exe, avsp.exe and one more i don't remember the name. the last one it deleted, avsp and rundll32 it couldn't.
I tried to scan my computer with sysclean.com (a dos based cleaner at trendmicro, one needs 4 files to run this) and it detected 1 viruses, namely avsp.exe I dont know whether it could delete it or not. Relevant log is as below
25384 files have been read.
25384 files have been checked.
25353 files have been scanned.
177734 files have been scanned. (including files in archived)
1 files containing viruses.
Found 1 viruses totally.
Maybe 0 viruses totally.
Also I cant use regedit.
anything like msconfig would again open the pop window with msg 'select the program you want to use to open this file'.
Thanks in advance