Worm

I have a w32.spybot worm how do i get rid?

please please help

 

Welcome to MajorGeeks.com, please follow the steps below:

http://www.majorgeeks.com/images/grenade.gif Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

http://www.majorgeeks.com/images/grenade.gif Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

http://www.majorgeeks.com/images/grenade.gifAfter doing ALL of the above and you still have a problem, make sure you have booted to normal mode and run the steps in the below thread to properly use HijackThis and attach the log:

http://www.majorgeeks.com/images/grenade.gif Downloading, Installing, and Running HijackThis

 

heres the log please help

thank you

 

You have not completed all of the steps in the READ ME, there are no signs of you running the online scans so please go back and complete this then attach a fresh HJT log.

 

I used one of the online scan it did it.

This is why majorgeeks is the best site ever .

thanks guys.

 

Are you having any further problems?

 

Nope i ran a norton adaware sptybot,microsoft spyware and the online one i can never remember the name of . scans all negitive the system is running well again.



and im a happy bunny

thanks

 

Your Welcome!

You should see this article on How to Protect yourself from malware!

Surf Safely!

 

Altough it is much better i am still problems with uploading attachments and sending file.

can you please take a look at the log and advise thank you.

 

Scan with HijackThis and Check the Boxes for the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

Make sure All Browser Windows are Closed when you Click FIX.

NEXT:
Run CCleaner to clean up cookies and temp files.

Your log is pretty clean, are you having any problems?

 

Thank you for looking at it for me.

I wont be able to remove those until tuesday when i get home.

The problem im having is that i cant seem to upload at all , I cant attach anything to emails or send anything via msn messenger it was fine before i got the worm now i have got rid of it everything is better apart from that.


Thanx bigarrick are you really that big?

 

After you fix those entries in HJT, check out the site below and see if anything still remains.

W32.Spybot.WORM

 

I got home and it was working fine without doing anything.

Thanks for your time dude.

 

Your Welcome!

You should see this article on How to Protect yourself from malware!

Surf Safely!