Major Virus....Your Help would be most appreciated!!

[Kafar]

Hello, I am getting the following on my computer all of a sudden::

1. Windows security warning....file wscntfy.exe is infected. Do you want to activate your antivirus software now? clicking yes takes to http://laptopantivirus.net/purchase?r=57.2. clicking no continues to have the security warning window pop up....you can't get out of it.

2. This windows security warning is popping up every 5 seconds....continually.

3. I can not run anything on my computer. I downloaded HiJack This but I can't install/run it. Therefore I can't produce the log. I also can't pull up anything else, not even Windows Task Manager....it blinks up and is gone.

4. I am able to go to some sites on the internet, but every once in a while (about every 30 seconds or so), no matter what I click on takes me to www.adult.com or www.viagra.com or www.porno.org.

I am running Windows XP.

Thanks!
--------------------------
http://forums.spybot.info/showthread.php?t=42463

[Blade81]

Hi,

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.


Download GMER (http://www.gmer.net) here by clicking download exe -button and then saving it your desktop:
Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.