[gizmo]

hi everyone, im new to the site. if someone could help that would be great.I have windows xp pro and my virus protection is bitdefender v10 and everytime i turn on my pc or scan for virus's it comes up with Generic.pws.WoW.972F1F54 and the files infected are c:/windows/dbhelp.dll and c:/documents and settings/all users/application data/bitdefender/desktop/quarantine/dbhelp.dll, please help!!!

[evilfantasy]

Welcome to TCF.

I am going to post some instructions to get us started in cleaning up your system.
It will look like a lot but they are simple and straight forward instructions.

CCleaner
If you do not have CCleaner please install it. Download CCleaner
This will help the scans to run faster.
* Once CCleaner is open use the default options.
* Click Analyze and it will show a log of what will be removed.
* Next click Run Cleaner to remove everything.
* Then on the upper left of CCleaner select the Registry tab.
* Click Scan For Issues.
* Then click Fix selected issues.
* It will prompt you to make a backup. For the first run I would suggest doing so.
* Exit the program and you are done.

==============================

If you don't have Spybot Search & Destroy please download it. By Clicking Here

* Click the Spybot.exe Icon to start the installation.
* Follow the prompts using the default settings and just click your way through the installer by using the Next button.
* After the installation has finished, you will see a Spybot - Search & Destroy button on your desktop and in your start menu. Click on it to start Spybot-S&D the first time.
* The first time you start Spybot-S&D, it will display a Wizard.
+ It is very important to keep up-to-date. Be sure to check for updates now and use the Immunize feature.
+ I suggest using the Resident SDHelper.
+ I don't activate the TeaTimer which does provide realtime protection but has been problematic.
* After the tutorial has finished, you will find yourself on the Settings or Update page.
+ The left side of the program has a navigation bar that can lead you to all functions of the program.
* Click labeled Spybot-S&D and this leads you to the main page.
* The first button in this toolbar is named Check for problems. That is the button you press to start the scanning. Lean back and watch the scan progress.
+ Once the scan is complete you can distinguish between the red entries, which represent spyware and similar threats, and the green entries, which are usage tracks.
+ All problems displayed in red are regarded as real threats and should be dealt with. For the green entries removal is non-critical, but depends on your personal preferences.
* Now it's time to use the Fix selected problems button. This will remove all threats found.
* Once the cleaning is done exit Spybot.
Note: Some forms of malware can not be removed by Spybot on the first attempt. If this is the case Spybot will ask to remove the entries upon restarting the computer. After restarting the computer run Spybot again. If the problem is still there we will deal with that with special removal tools.

Disable Spybot's TeaTimer.
While TeaTimer is an excellent tool for the prevention of spyware, it can sometimes prevent our tools from fixing certain things.
Please disable TeaTimer for now until you are clean. TeaTimer can be re-activated once your logs are clean.
* Open Spybot Search & Destroy.
* In the Mode menu click "Advanced mode" if not already selected.
* Choose "Yes" at the Warning prompt.
* Expand the "Tools" menu.
* Click "Resident".
* Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active." box.
* In the File menu click "Exit" to exit Spybot Search & Destroy.
+ You can re-enable TeaTimer when we are done.
===============================

These instructions are important so please read and follow carefully.

Download HijackThis Here
Save HJTsetup.exe to your desktop.
Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\HijackThis.
Some new versions save to C:\Program Files\Trend Micro\HijackThis
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
DO NOT PUT HijackThis.exe ON THE DESKTOP OR IN A TEMP FOLDER.
This is important because it will create backups and they are easily lost if not installed correctly.

*Important*
Rename the Hijackthis.exe file to Analyze.exe. This is important because some new forms of malware can hide from HijackThis.exe. Right click the HijackThis.exe file in C:\Program Files\HijackThis and choose rename. Type in Analyze.exe and press the enter key.
Right click the Analyze.exe file and send to desktop to create a shortcut.

Next click on the "Do a system scan and save a log file button". It will scan and then a log will open in notepad.
In the top left of the notepad window click "File" > "Save As" and save it to the Desktop.
In the next post please add the log as an attachment.
Click Here for instructions on how to add items as an attachment.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

===================================

In the next post please add:
HijackThis log.

[gizmo]

ive just downloaded ccleaner and it wont open cause its a different file format, its got .exe at the end??? hijack this log

[evilfantasy]

That should work.

Try this link to see if it will open. http://www.filehippo.com/download/f2...2ecd/download/

Save it to the desktop and then double click it to start the installer.

If you can not install it then move to the next steps.

[gizmo]

when i click on the spybot download here link it takes me to antoher page and says invalid,redirecting you, and then it takes me to the download page , do you know which catagory it is in. by the way i have bit comet and it downloads through that, would that make a difference. hijack this log

[evilfantasy]

Turn off bit comet.

I will need to revise the links. You can use this one for Spybot. http://filehippo.com/download_spybot_search_destroy/

This one for HijackThis. http://filehippo.com/download_hijackthis/

[gizmo]

i do but when i download it automatically downloads it through bitcomet. should i download spybot and leave ccleaner till later

[Hybr!d]

Originally Posted by gizmo

i do but when i download it automatically downloads it through bitcomet

Then uninstall BitComet, after-all, that is why you are in this mess.

Apart from it being illegal, most of the files you are downloading are actually viruses disguised as the file you think you are getting.

[gizmo]

Originally Posted by Dave Hybrid

Then uninstall BitComet, after-all, that is why you are in this mess.

Apart from it being illegal, most of the files you are downloading are actually viruses disguised as the file you think you are getting.

kk il uninstall it,cheerz

i gotta reboot so ill be back

[gizmo]

ive completed ccleaner and now im on spybot,i downloaded it and went to install it and as it is about to install it sayse error sending request, a connection with the server cannot be established, can u help?