Trojan Horse Virus

Press F8 as if you were going to boot in safe mode. Select "Safe Mode with Networking". Then, try running Kaspersky Online Scanner. If you can't run it let me know.

To find the Spybot log show hidden files and folders. Control Panel > Folder Options > View tab > check "Show hidden files and folders". Then go to C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs and post the contents of Fixes.yymmdd-hhmm.

Sorry I didn't state you had to show hidden files and folders to see Application Data. Note: be sure to hide them again by checking "Do no show hidden files and folders" after getting the log.

 

this is the spybot report.
--- Report generated: 2006-09-25 17:46 ---

eAcceleration: Setup info (File, fixed)
C:\WINDOWS\Downloaded Program Files\setup.inf

Windows Media Player: Client ID (Registry change, fixed)
HKEY_USERS\S-1-5-18\Software\Microsoft\MediaPlayer\Player\Settings\Client ID=

Windows Media Player: Client ID (Registry change, fixed)
HKEY_USERS\.DEFAULT\Software\Microsoft\MediaPlayer\Player\Settings\Client ID=


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi

 

Were you or are you able to access "Safe Mode with Networking" and run the online scan?

 

yes, its scanning my computer now
i'll post it shortly

 

this is what i got so far, i press neutralized all. will post all on completion if any

deleted: adware not-a-virus:AdWare.Win32.Casino.w File: C:\WINDOWS\Golden Palace Casino PT setup.exe/PE_Patch.PECompact/PecBundle/PECompact
deleted: Trojan program Trojan.Win32.VB.wh File: C:\!KillBox\ttsx.exe/data0002
deleted: adware not-a-virus:AdWare.Win32.MediaBack.a File: C:\!KillBox\ttsx.exe/data0003
deleted: Trojan program Trojan.Win32.VB.wh File: C:\!KillBox\ttsx.exe/data0004
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Program Files\Morpheus\mymorpheusToolbar.exe

 

thats all of it, i pushed scan my oomputer, could not find online scanner is it the same thing?

 

Yeah, same thing. It delete them. Are you having any more problems?

 

thats all of it,

i got a question, if i use my computer in safe mode with networking is that okay?? cause it works good in here

 

Not really, alot of programs will not work in safe mode. What isn't working in normal mode?

 

still shuts down on its own in normal mode..

do you think its best to format harddrive then reload windows??

 

There are a few other things you can try, but it's up to you. This far and nothing has helped so I'd say it is safer to format.