Virus/Spyware problems.

[Dr.Zyklon]

hi guys, i have a problem with a virus,maybe you guys an give me a hand, i was using limewire and when i was done it restarted itself, and i closed it and it did it again like 300 times, so then i got these messages from my antivirus(norton) telling me there was a virus named backdoor.trojan and that i could not delete it, so im stuck with that message bc it wont go away either.while looking for an answer i came across this forum and some program called hijackthis, it tells me to save the log and show it to an expert and im hoping you guys are it, thank you guys for your help.

here is the log
-----------------------------------------------------------------

 

[Dr.Zyklon]

i had to upload it to some website bc the darn log was to big to post it,well anyway here plz help me out, some one download it and take a look at it, i would really appreciate it. thx everyone

here is the link: http://www.uploading.com/?get=NZMH2FZZ

 

[howard_hopkinso]

Hello and welcome to Techspot.

Go HERE and follow the instructions exactly.

Post a fresh HJT log into this thread, only after doing the above.

I have moved your posts to their own thread. This will save any confusion.

Regards Howard :wave: :wave:

 

[Dr.Zyklon]

here is the new log. hope that can help you help me

 

[howard_hopkinso]

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ShowWnd.exe

Close task manager.


Run HJT with no other programmes open(except notepad). Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe

Fix all 016-DPF entries.

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

ShowWnd.exe You will need to search your computer for this file and delete all instances of it.

Reboot into normal mode and turn system restore back on.


Regards Howard

 

[Dr.Zyklon]

thank you so much, i fixed them with the hijackthis as you said and also found it when i searched for it and deleted it hopefully this will fix the problem, again thank you for saving my pc