I'm stuck on my desktop and nothing will open so i've no idea what to do. I'm using another PC right now to post this. My PC was running really slow before i got the virus ( I had been transering a big file to a removable hard disk) but it had been finished for a while. I'm going to try and see if i can open stuff on other user accounts but i'm not hopeful. I'm afraid i've no idea what the virus was/is called. cheers for any help

Hi There

OK, here we go

Ensure that your copy of EWIDO is up to date.

Download and install CleanUp! Here
*NOTE* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.
We will use this program later.


THE FIX

Please read this post completely, it may make it easier for you if you copy and paste this post to a new text document or print it for reference later.

1. Click this link to be sure you can view hidden files.

2. Ensure you are NOT connected to the internet.

3. Reboot into safe mode.

Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

4. Open up and run Ewido:

• Click on scanner
• Click Complete System Scan and the scan will begin.
• During the scan when it ask if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK
• When the scan is finished, look at the bottom of the screen and click the Save report button.
• Save the report to your desktop

Close Ewido

5. Close all browsers, windows and unneeded programs.

6. Open HiJack and do a scan.

7. Put a Check next to the following items:

O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"

8. click the Fix Checked box

9. Please remove the following files using Windows Explorer (if present):

C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe

10. Run the program CleanUp!

11. Reboot into normal mode and please run this online virus scan: ActiveScan - Save the results from the scan!

12. Please post the Active scan log and a fresh HiJackThis log. Let me know how your computer is running.