request for help

[Woozlepaw]

I'm afraid I need assistance cleaning some nasty malware out of my machine.

When it boots I get a warning screen telling me that I'm infected with something called Worm.Win32.NetSky and to run a full scan. A complete scan of my AVG 9.0 anti-virus software doesn't find anything. I did some online searching about how to get rid of this little creature and was directed to stop the process using the task manager. Unfortunately, CTRL+ALT+DEL or any other attempt to open the task manager produces a warning which reads "Application cannot be executed. The file is infected. Please activate your antivirus software."

I have read with interest some other threads in this forum that seem to detail steps about how to restore a system with this type of infection, but they advise against attempting to use the steps from someone else's problem on my machine, as every infection is different.

Currently, the infected computer is not connected to the internet as I was told that was a recommended first step to disinfecting it.(I turned off the Wi-Fi antenna so it can't connect) I am starting this thread from a clean laptop. I am very grateful for any help I can get with this problem.

[harry 48]

Hello and welcome to Computer Hope Forum. The first thing I will need you to do is to go to this link and follow the directions precisely.


 If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected.


 If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

 If you can't run any step, just jump to the next one. Please let me know how you are doing or have any questions. Initially, We will need the SuperAntiSpyware, MBAM and HJT logs. Please post any logs that you can generate.


harry

[Woozlepaw]

Hello Harry,

I have a hitch in my giddy-up. I was following the proscribed steps to the letter and got as far as running the SUPERAntiSpyware software you suggested. When it finished the scan and asked me if I wanted to reboot I clicked on "yes" as the instructions specify. It went through it's normal boot sequence and when it got to the Windows welcome screen and I clicked on the admin log-in, it told me for about a second that it was "loading my personal settings", then quickly turned to "logging off". I can't seem to advance any further than the Windows Welcome screen. Please advise.

Paul

[SuperDave]

Hello Woozlepaw and welcome to Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

Let's try this.

Go to this link to create a Rescue CD or to this site to create a Rescue USB. Carefully follow all the instructions for whichever method you choose.