evilfantasy

Were going to need to run a more thorough scanners. These will take longer then the others have, just follow the instructions and relax while they run. Do them separately, one right after the other.

First:

Please download ATF Cleaner by Atribune. ATF Cleaner.exe

Make sure that all browser windows are closed.

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All and UNCHECK Cookies.
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All and UNCHECK Cookies.
• Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All and UNCHECK Cookies.
• Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF Cleaner menu to close the program.

Second:

Please download DrWeb CureIt & save it to your desktop.

Scan with DrWeb-CureIt as follows:

• Double-click on drweb-cureit.exe and then click Start.
• An Express Scan of your PC notice will appear.
• Under Start the Express Scan Now Click OK to start.
  • This is a short scan that will scan the files currently running in memory.
  • If or when something is found, click the Yes button when it asks you if you want to cure it.
• Once the short scan has finished, Click Options > Change settings
• Choose the Scan tab and UNcheck Heuristic analysis and click OK
• Back at the main window, select the Complete scan button.
• Then click the Green Arrow Start Scanning button on the right and the scan will start.
  • Click Yes to all if it asks if you want to cure/move any file(s).
• When the scan is done.
• In the Dr.Web CureIt menu on top left, click File and choose Save report list.
• Save the DrWeb.csv report to your Desktop.
• Exit Dr.Web Cureit.

• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.

• After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
• Copy and paste that log in the next reply

Third:

Please run the F-Secure Online Scanner

Note: This Scanner works with Internet Explorer Only!

• Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
• Allow the Active X control to be installed on your computer, then click the Accept button
• Click Full System Scan and allow the components to download and the scan to complete.
• If malware is found, check Submit samples to F-Secure then select Automatic cleaning
• When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
• Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
  • If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan
• When the cleaning option is presented, Uncheck Submit samples to F-Secure
• Click Automatic cleaning
• When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
• Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
• This scan can take quite some time, so please be patient

Next post:
Dr. Web log
F-Secure log

Hey it's me

thanks. yeah I had already figured I'm not going anywhere today. be back as soon as I'm done.

evilfantasy

No problem, these will take a while. We will pick it up when they are done.

Hey it's me

the scan froze...I stopped it and restarted. it was 95% finished. It said it found a virus. UGH!

Hey it's me

also, Evil, I selected only the main drive, C rather than the extra drive I have in my computer. That drive doesn't have any drivers on it. I use it for back up and space. Anyway, the scan is going quickly and it got stuck on a program I don't use but keep on that other drive.

evilfantasy

It is probably getting stuck on the driver. If it happens again we will need to try something else.

evilfantasy

I know for a fact that SuperAntispyware removes the core.cache.dsk as I just finished with a log from another forum where it was removed.

You may need to boot into Safe Mode and let SuperAntispyware do a full scan and remove what is found that way.

Attached Files

SUPERAntiSpyware Scan Log - 01-14-2008 - 12-27-12-1.txt (533 Bytes, 41 views)

Hey it's me

so should i stop the dr web scan and run antispyware in safe mode?

evilfantasy

Let Dr. Web finish if it can. You may need to try it in safe mode also.

Hey it's me

ok cool.