Remnants of Netsky linger

[Bud Bullets]

About two weeks ago I was infected with SW while browsing a guitar website. I had Sophos running and got several warnings. My desktop went to red and I received a message about Netsky and buy something to protect my PC.

Anyway, I contacted Sophos help first. Unfortunately, they told me to turn off my System Restore and scan and then turn restore back on. That should do it...not. And now no more help. I just read on your site that the System Restore should not be turned off, so I may be in a bad situation.

On advice from a friend, I downloaded SpyBot S&D and ran a scan (with my system restore off..ugh). It seemed to clean up my PC, except I still cannot access my desktop in the Control Panel. In the Control Panel, there is a file called warning.html in the Desktop select box. Apparently, this is left over from the infection. I cannot get rid of it. I haven't dared turn on my email for two weeks.

I would like to get rid of it and I would like to know if my PC is still infected with something that could be a problem.

Thanks

[Blade81]

Hi,

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.