[babycoconut]

Hi there,

I'm not able to start any programs/ applications on my desktop or start menu. I ran an anti-virus scan a couple of days ago and came up with over 1000 infected files (attachment). Some came up with the W32/Sdbot.worm.gen.n virus and the others could not be repaired. Almost all were not files we had downloaded and were in our "Shared" folder. We didn't have any security in place except for a couple of free ones and they were probably expired anyways. My task manager is almost useless right now and I have to cut the power to restart the darn thing.

5 Steps:

Step 1- done. I removed Viewpoint Media Player and Spyware Blaster

Step 2- Not done. Panda Scan won't run in Firefox and it freezes every time I try to get to IE.

Step 3- Not done. I installed Spyware Blaster (hmmm) Can't get Zoned out installed. Installed IE-spyad but can't run it.

Step 4- Not done. Can't update because I can't get to IE.

Step 5- Not done. Can't run Deckard's system scanner.

Please be gentle - I don't know a thing about computers!
This thing is so messed up I appreciate all the help I can get.

Thanks,
Karen

 

[Glaswegian]

Hi and welcome to the Security Forum.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

Let's see if we can help and try and get some stability back first of all.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your log is clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.


Combofix
Download ComboFix and save it to your desktop.

**Note: It is important that it is saved directly to your desktop**

CAUTION! Combofix should not be run without supervision - we cannot be held responsible if you end up re-installing Windows!

1. Close any open browsers and physically disconnect from the Internet.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
See here for a guide to disabling AV, Firewall and Anti-malware programmes.

• Double click on combofix.exe & follow the prompts.
• When finished, it will produce a report for you.
• Please post the log C:\ComboFix.txt along with a fresh HijackThis Log for further review.

NOTE: ComboFix should not take more than 20 minutes to run - this includes the reboot if malware is found. If it does:

• Open Task Manager (Ctrl+Alt+Del) and go to the Processes Tab
• End any processes called indstr, find, sed or swreg,
• ComboFix should now contimue.

Please advise me if you had to end any Processes in this way, and let me know the Process Names.

Do not mouseclick combofix's window whilst it's running. This may cause it to stall.