Computer Hope

Software => Computer viruses and spyware => Topic started by: php111 on November 24, 2007, 02:12:42 PM

Title: I have a worm and spyware
Post by: php111 on November 24, 2007, 02:12:42 PM
Hello,

While I was scanning my system with the Spyware Doctor inside of PC Tools firewall, it found a worm and ALOT of spyware with threads and infections. The question is, Why the *censored* on earth did I wait for the last minute? Well beats me. Right now I have the Scan Results open and no I don't see the results in a text format. How can I get my system back up to normal?
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 02:30:08 PM
Quote
Right now I have the Scan Results open and no I don't see the results in a text format.

What scan results?

Please read through this thread and post the requested logs. Thanks.

http://www.computerhope.com/forum/index.php/topic,46313.0.html
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 02:40:34 PM
The results of CCleaner are more then 1000 characters so I can't post it here. Anyway that I can post it here? I don't know how to do attachments.



Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 02:47:00 PM
There are directions in the link I provided for everything.

If you get stuck, don't hesitate to ask for help.  8)
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 02:53:31 PM
There are directions in the link I provided for everything.

If you get stuck, don't hesitate to ask for help.  8)

But I have not a clue how to post over a 1000 character in here.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 02:55:51 PM
You post it as an attachment. It's in the guide.

Quote
How to attach logs in a post

Save the log to somewhere you can easily find it. (usually the desktop)

To do this, from within the notepad go to the top of the page and select "File" > "Save As..." enter the file name and click "Save" Be sure the desktop is the location selected to save to.
Please save all files as Text Documents (.txt)

Posting the log

1. Below the text box click "Additional Options..."
* If replying in a thread, before putting text into the reply box select "Preview"
2. Scroll down and select "Additional Options..."
3. Click "Browse"
4. Locate the file you want to attach and double click it to enter it into the window.
5. If you have more than one log click "(more attachments)" and a new window will open for adding another log.
* You will need to enter a messge in the text box as well.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 02:59:31 PM
Now this is the message I get when I try an attachment.

The upload folder is full. Please try a smaller file and/or contact an administrator.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 03:06:45 PM
Go to the top of this page and log out >>(http://www.computerhope.com/forum/Themes/classic/images/english/logout.gif)<< then log back in and try again.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:09:11 PM
Go to the top of this page and log out >>(http://www.computerhope.com/forum/Themes/classic/images/english/logout.gif)<< then log back in and try again.

Unbelieveable. I did log out and I logged back in but I get the same message, the upload is full.
Title: Re: I have a worm and spyware
Post by: Broni on November 24, 2007, 03:11:48 PM
It's full. Staff has to clean it out.
Meanwhile, open that CCleaner file in Notepad, highlight half of it, copy, and paste it here.
Do same thing with the other half.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:15:48 PM
What the *censored*. It is still to huge even cutting half.
Title: Re: I have a worm and spyware
Post by: Broni on November 24, 2007, 03:16:56 PM
Cut it in three, then, or four, until it fits.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:19:24 PM
How the *censored* do I cut it? Now I am getting pissed. This is aggervating.
Title: Re: I have a worm and spyware
Post by: Broni on November 24, 2007, 03:23:40 PM
Highlight 1/3 of the text, copy, paste...Highlight second 1/3, copy, and paste...etc.
It's not that complicated.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:24:42 PM
Highlight 1/3 of the text, copy, paste...Highlight second 1/3, copy, and paste...etc.
It's not that complicated.

Yeah that is what I have been trying to do but it is still to big.
Title: Re: I have a worm and spyware
Post by: Broni on November 24, 2007, 03:26:28 PM
Try 1/4, 1/5, etc., until it fits...
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:29:32 PM
Try 1/4, 1/5, etc., until it fits...

I give up. I have no clue. You want me sit here and mesaure in fifeths and everything else? No you are talking to a wrong person. I can't even sit here and time out a quarter.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 03:30:01 PM
Quote
The results of CCleaner are more then 1000 characters

A ccleaner log is not needed anyway.

We need the logs from  here (http://www.computerhope.com/forum/index.php/topic,46313.0.html)
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:34:03 PM
Quote
The results of CCleaner are more then 1000 characters

A ccleaner log is not needed anyway.

We need the logs from  here (http://www.computerhope.com/forum/index.php/topic,46313.0.html)

You did not at all specified what log you wanted. There are a bunch of logs that site.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 03:34:56 PM
3 logs all specifically asked for.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:36:39 PM
3 logs

Screw it I leave the worm on here along with spyware. 3 logs???? There was nothing at all about 3 logs.
Title: Re: I have a worm and spyware
Post by: Broni on November 24, 2007, 03:39:46 PM
What's wrong with you? Do you need any help, or not?
We don't need any rudeness here.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 03:41:09 PM
No problem, if you want to keep the infections you can.

I wrote the guide, I know what logs it requests.
Title: Re: I have a worm and spyware
Post by: php111 on November 24, 2007, 03:41:57 PM
What's wrong with you? Do you need any help, or not?
We don't need any rudeness here.

I am sorry. I just need help. I do not see anything specified about 3 logs. There was nothing at all with 3 logs.
Title: Re: I have a worm and spyware
Post by: evilfantasy on November 24, 2007, 03:46:45 PM
Then you didn't actually read it good enough. There are details on what to run, how to configure the scanners, and how to save the logs for each scan.

Quote
Step 3 SUPERAntiSpyware

Please read carefully in order to clean and save the log properly

Download  SUPERAntispyware Free Edition (http://www.superantispyware.com/download.html)

SUPERAntiSpyware should be run in safe mode.  Getting into Windows Safe Mode (http://www.computerhope.com/issues/chsafe.htm).

Install it and double-click the icon on your desktop to run it.
*  It will ask if you want to Update the program definitions, click Yes.
*  Under Configuration and Preferences, click the Preferences button.
*  Click the Scanning Control tab.
*  Under Scanner Options make sure the following are checked:
+  Close browsers before scanning
+  Scan for tracking cookies
+  Terminate memory threats before quarantining.
+  Please leave the others unchecked.
+  Click the Close button to leave the control center screen.
*  On the main screen, under Scan for Harmful Software click Scan your computer.
*  On the left check C:\Fixed Drive.
*  On the right, under Complete Scan, choose Perform Complete Scan.
*  Click Next to start the scan. Please be patient while it scans your computer.
*  After the scan is complete a summary box will appear. Click OK.
*  Make sure everything in the white box has a check next to it, then click Next.
*  It will quarantine what it found and if it asks if you want to reboot, click Yes.
*  To retrieve the removal information please do the following:
+  After reboot, double-click the SUPERAntiSpyware icon on your desktop.
+  Click Preferences. Click the Statistics/Logs tab.
+  Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
+  It will open in your default text editor (such as Notepad/Wordpad).
+  Save the notepad file to your desktop by clicking (in notepad) "File" "Save As"
* Save the log somewhere you can easily find it. (normally the desktop)
*  Click close and close again to exit the program.
*  Please add the log as an attachment in your post.

Quote
Step 4 Online Virus Scan

Requires Internet Explorer

Use the  ESET Nod32 Online Scanner (http://www.eset.com/onlinescan/index.php)
Click YES, I accept the Terms of Use. Then click Start
The scan report is saved by default in C:\Program Files\EsetOnlineScanner\log.txt
Add the EsetOnlineScanner\log.txt in your post as an Attachment

Quote
Step 6 HijackThis

Please run HijackThis only after the above steps have been completed

Download HijackThis (http://filehippo.com/download_hijackthis/).
Double-click on the installer you just downloaded.
Click on the "Install" button to install.
It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis
Please do not change the default install location.
Upon install, HijackThis should open for you.

Next click on the "Do a system scan and save a log file" button.
HijackThis will scan and then a log will open in notepad.
In the top left of the notepad window click "File" > "Save As" name it hijackthis and then save it to the Desktop.
Please save the log as a text (.txt) file or .log
In your post, add the log as an Attachment
.
* Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
Title: Re: I have a worm and spyware
Post by: CBMatt on November 27, 2007, 04:52:59 AM
php111,
I understand your frustration here; computers can seem like a alien language if you're not familiar with using them.  Just try to be patient and it will make it a lot easier for us to guide you through this process.  Please follow evilfantasy's instructions completely and post the logs he has requested.  I just ran a test and the upload folder appears to no longer be full, so try giving it another shot.