win32.downloader.gen- Help Please

[Snurd]

I really hate to bother the forum with this, but I'm at my wit's end!

I've been trying to remove this virus for several days now with no success. I'm running Windows XP and the virus shows up in SpyBot. It will disappear in safe mode, then reappear in the next regular scan.

I've searched the forum and tried everything that I can understand. I noticed the OTL program and downloaded it. However, I'm afraid to proceed without some guidance.

Here's the latest SpyBot Result. If the entire report if needed, I'll be happy to post it. It's quite lengthy.

Win32.Downloader.gen: [SBI $E6AD2227] Program directory (Directory, nothing done)
C:\Documents and Settings\Keith Simmons\Local Settings\Application Data\Conduit\


Any help is greatly appreciated. Thanks! Keith

[tashi]

Hello Snurd,

Which version of Spybot do you have and did you run with elevated Administrator permissions? Please see this topic in the malware forum: win32.downloader.gen

Best regards.

[Snurd]

Hi Tashi,

I'm using version 1.6.0.

I've tried to run in administrator mode, but with XP, a password is required and I haven't been able to get that to work.

Best,

Keith

[tashi]

Hi Keith,

I've tried to run in administrator mode, but with XP, a password is required and I haven't been able to get that to work.

Are you using an Administrator account on your XP computer?

Best regards.

[Snurd]

When I boot in safe mode, I'm given the choice of "Administrator", or "Keith". If I choose administrator in that mode, no password is prompted, or required.

I've used that administrator account in safe mode, but the virus doesn't appear there in Spybot.

[Snurd]

Also, In the control panel under user accounts, only "Keith", or "Guest" appear as choices.

[tashi]

Hi there,

Someone can take a look at the system if you start a topic in the Malware Removal Forum where a volunteer analyst will advise when available.

First see that forum's FAQ which also includes instructions in post #2 on how to provide DDS and aswMBR logs, which are used in the preliminary analysis.

http://forums.spybot.info/showthread.php?t=288

Please include a link back to this thread.

Best regards.

[Snurd]

Got it. I'll give it a try. Thanks!