I have a worm and spyware

[php111]

Hello,

While I was scanning my system with the Spyware Doctor inside of PC Tools firewall, it found a worm and ALOT of spyware with threads and infections. The question is, Why the *censored* on earth did I wait for the last minute? Well beats me. Right now I have the Scan Results open and no I don't see the results in a text format. How can I get my system back up to normal?

[evilfantasy]

Right now I have the Scan Results open and no I don't see the results in a text format.

What scan results?

Please read through this thread and post the requested logs. Thanks.

http://www.computerhope.com/forum/index.php/topic,46313.0.html

[php111]

The results of CCleaner are more then 1000 characters so I can't post it here. Anyway that I can post it here? I don't know how to do attachments.

[evilfantasy]

There are directions in the link I provided for everything.

If you get stuck, don't hesitate to ask for help. 

[php111]

There are directions in the link I provided for everything.

If you get stuck, don't hesitate to ask for help. 

But I have not a clue how to post over a 1000 character in here.

[evilfantasy]

You post it as an attachment. It's in the guide.

How to attach logs in a post

Save the log to somewhere you can easily find it. (usually the desktop)

To do this, from within the notepad go to the top of the page and select "File" > "Save As..." enter the file name and click "Save" Be sure the desktop is the location selected to save to.
Please save all files as Text Documents (.txt)

Posting the log

1. Below the text box click "Additional Options..."
* If replying in a thread, before putting text into the reply box select "Preview"
2. Scroll down and select "Additional Options..."
3. Click "Browse"
4. Locate the file you want to attach and double click it to enter it into the window.
5. If you have more than one log click "(more attachments)" and a new window will open for adding another log.
* You will need to enter a messge in the text box as well.

[php111]

Now this is the message I get when I try an attachment.

The upload folder is full. Please try a smaller file and/or contact an administrator.

[evilfantasy]

Go to the top of this page and log out >><< then log back in and try again.

[php111]

Go to the top of this page and log out >><< then log back in and try again.

Unbelieveable. I did log out and I logged back in but I get the same message, the upload is full.

[Broni]

It's full. Staff has to clean it out.
Meanwhile, open that CCleaner file in Notepad, highlight half of it, copy, and paste it here.
Do same thing with the other half.

[php111]

What the *censored*. It is still to huge even cutting half.

[Broni]

Cut it in three, then, or four, until it fits.

[php111]

How the *censored* do I cut it? Now I am getting pissed. This is aggervating.

[Broni]

Highlight 1/3 of the text, copy, paste...Highlight second 1/3, copy, and paste...etc.
It's not that complicated.

[php111]

Highlight 1/3 of the text, copy, paste...Highlight second 1/3, copy, and paste...etc.
It's not that complicated.

Yeah that is what I have been trying to do but it is still to big.

[Broni]

Try 1/4, 1/5, etc., until it fits...

[php111]

Try 1/4, 1/5, etc., until it fits...

I give up. I have no clue. You want me sit here and mesaure in fifeths and everything else? No you are talking to a wrong person. I can't even sit here and time out a quarter.

[evilfantasy]

The results of CCleaner are more then 1000 characters

A ccleaner log is not needed anyway.

We need the logs from here

[php111]

The results of CCleaner are more then 1000 characters

A ccleaner log is not needed anyway.

We need the logs from here

You did not at all specified what log you wanted. There are a bunch of logs that site.

[evilfantasy]

3 logs all specifically asked for.

[php111]

3 logs

Screw it I leave the worm on here along with spyware. 3 logs? There was nothing at all about 3 logs.

[Broni]

What's wrong with you? Do you need any help, or not?
We don't need any rudeness here.

[evilfantasy]

No problem, if you want to keep the infections you can.

I wrote the guide, I know what logs it requests.

[php111]

What's wrong with you? Do you need any help, or not?
We don't need any rudeness here.

I am sorry. I just need help. I do not see anything specified about 3 logs. There was nothing at all with 3 logs.

[evilfantasy]

Then you didn't actually read it good enough. There are details on what to run, how to configure the scanners, and how to save the logs for each scan.

Step 3 SUPERAntiSpyware

Please read carefully in order to clean and save the log properly

Download SUPERAntispyware Free Edition

SUPERAntiSpyware should be run in safe mode. Getting into Windows Safe Mode.

Install it and double-click the icon on your desktop to run it.
*  It will ask if you want to Update the program definitions, click Yes.
*  Under Configuration and Preferences, click the Preferences button.
*  Click the Scanning Control tab.
*  Under Scanner Options make sure the following are checked:
+  Close browsers before scanning
+  Scan for tracking cookies
+  Terminate memory threats before quarantining.
+  Please leave the others unchecked.
+  Click the Close button to leave the control center screen.
*  On the main screen, under Scan for Harmful Software click Scan your computer.
*  On the left check C:\Fixed Drive.
*  On the right, under Complete Scan, choose Perform Complete Scan.
*  Click Next to start the scan. Please be patient while it scans your computer.
*  After the scan is complete a summary box will appear. Click OK.
*  Make sure everything in the white box has a check next to it, then click Next.
*  It will quarantine what it found and if it asks if you want to reboot, click Yes.
*  To retrieve the removal information please do the following:
+  After reboot, double-click the SUPERAntiSpyware icon on your desktop.
+  Click Preferences. Click the Statistics/Logs tab.
+  Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
+  It will open in your default text editor (such as Notepad/Wordpad).
+  Save the notepad file to your desktop by clicking (in notepad) "File" "Save As"
* Save the log somewhere you can easily find it. (normally the desktop)
*  Click close and close again to exit the program.
*  Please add the log as an attachment in your post.

Step 4 Online Virus Scan

Requires Internet Explorer

Use the ESET Nod32 Online Scanner
Click YES, I accept the Terms of Use. Then click Start
The scan report is saved by default in C:\Program Files\EsetOnlineScanner\log.txt
Add the EsetOnlineScanner\log.txt in your post as an Attachment

Step 6 HijackThis

Please run HijackThis only after the above steps have been completed

Download HijackThis.
Double-click on the installer you just downloaded.
Click on the "Install" button to install.
It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis
Please do not change the default install location.
Upon install, HijackThis should open for you.

Next click on the "Do a system scan and save a log file" button.
HijackThis will scan and then a log will open in notepad.
In the top left of the notepad window click "File" > "Save As" name it hijackthis and then save it to the Desktop.
Please save the log as a text (.txt) file or .log
In your post, add the log as an Attachment
.
* Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

[CBMatt]

php111,
I understand your frustration here; computers can seem like a alien language if you're not familiar with using them.  Just try to be patient and it will make it a lot easier for us to guide you through this process.  Please follow evilfantasy's instructions completely and post the logs he has requested.  I just ran a test and the upload folder appears to no longer be full, so try giving it another shot.