Hi sportsplaya22,
Before I create false hopes. So far nothing has helped because this virus overwrites files, including Windows files itself. So I have a few questions for you, and a few things to do so we can assess the damage.
1) Do you have a backup of all your data? If not, can you make one. Just burn everything you want to keep onto a CD/DVD. Because it's most likely that you'll have to reformat and reinstall Windows. It would be a shame to lose all your data.
2) Download HijackThis.
http://www.bleepingc.../hijackthis.phphttp://209.133.47.12.../HijackThis.exehttp://www.downloads.../hijackthis.zipIf you are on Windows XP,
extract the file. Do not just doubleclick on it! This opens HijackThis in a temporary folder. This would interfere with the possibility to make back-ups.
Unzip to a folder other than your Desktop or the Temp folder. Then, doubleclick HijackThis.exe, and click "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that and copy and paste its contents in this thread.
Most of what it lists will be harmless or even essential, don't fix anything yet. Someone will be along to tell you what steps to take after you post the contents of the scan results.
3) Launch Notepad, and copy/paste the box below into a new text file. Save it as ListFiles.bat and save it on your Desktop.
dir c:\*.exe /s
Locate ListFiles.bat on your Desktop and double-click on it. It will open Notepad with some text in it. Please post the text here.
and 4) Launch Notepad, and copy/paste the box below into a new text file. Save it as fixme.reg and save it on your Desktop.
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windwows\CurrentVersion\Policies\System]
"Disable Taskmgr"=-
Locate fixme.reg on your Desktop and double-click on it.
You will receive a prompt similar to: "Do you wish to merge the information into the registry?".
Answer "Yes" and wait for a message to appear similar to "Merged Successfully".
The above Registry file was written specifically for this infection on this person's computer. It is NOT to be used on another computer, as it may cause damage that could result in a format!At least you can the task manager again.
Edited by Bobbi Flekman, 24 December 2005 - 12:54 PM.