[derunt15]

A few days ago I was completing an online search-- suddenly my desktop was replaced by a blue background and a text box which stated "Your computer is infected." Many icons were added to my desktop. 3 Red circles with white x's appearred on the bar near my clock. When I restart the computer, many dos windows open with a diagonally shifting cursor. SpySheriff (a program I didn't have before) opens but nothing else will after the computer has been running for about 30 seconds. It also says that my task manager has been disabled by my administrator.

I don't even know where to start--any help would be appreciated!

[Advertisements]

Hi and Welcome to G2G

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.

• Ad-Aware® SE Personal Edition
  *Note* For Ad-AwareSE also install the VX2 Addon Cleaner To run this tool once Adaware is updated click on Add-ons in the lefthand column. Select VX2 Cleaner V2.0 and click Run Tool. Click "OK" , then, if something is found, click "Clean" as in the directions given. Click "Close", and exit Ad-Aware.
  
• Spybot Search & Destroy
• CWShredder

Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT)


Once you complete those steps please download and run a scan with hijackthis save it's log and post it here. We will then continue with the removal of spysheriff and that screen.

Edited by MicroBell, 31 August 2005 - 01:37 PM.

[MicroBell]

Hi and Welcome to G2G

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running.

• Ad-Aware® SE Personal Edition
  *Note* For Ad-AwareSE also install the VX2 Addon Cleaner To run this tool once Adaware is updated click on Add-ons in the lefthand column. Select VX2 Cleaner V2.0 and click Run Tool. Click "OK" , then, if something is found, click "Clean" as in the directions given. Click "Close", and exit Ad-Aware.
  
• Spybot Search & Destroy
• CWShredder

Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT)


Once you complete those steps please download and run a scan with hijackthis save it's log and post it here. We will then continue with the removal of spysheriff and that screen.

Edited by MicroBell, 31 August 2005 - 01:37 PM.

[derunt15]

I didn't post my log because I couldn't even get into the system. I finally got it started in safe mode and ran ewido. It found about 200 infected files. It will now start in regular mode but it's really slow and constantly microsoft anti spy, adaware and ewido catch infected files. I'm planning on waiting until they're clear and running scandisk and defrag. Now that I can get in, I'll try to post my log as soon as possible. (Hopefully this afternoon.)

Thank you so much for your help!