Spyware installed\

I have e blue screen that pops up as my desktop wallpaper that says im in danger and there spyware installed. it hasnt disabled my system but i am unable to run applications in normal startup and i cannot see my task bar . i am doing this in safe mode.,.. its working fine this way….. please help

Hello insecure lee and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem. Please read the following guidelines which will help to make cleaning your machine easier:
• Please do not install/uninstall any programs unless asked to.
• Please do not run any scans other than those requested
• Please follow all instructions in the order posted
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• If you don't understand something, please don't hesitate to ask for clarification before proceeding
• The fixes are specific to your problem and should only be used for this issue on this machine.
• Please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!
Please note that I am still in training and my replies need to be checked by an expert in order for you to receive the best possible advice. This may result in a small delay between my posts but I shall try to keep this to a minimum.

I will reply with instructions as soon as possible.

Satchfan

ok. thanks. i will follow instructions

Hello again insecure lee

Restore Windows XP to a previous state

Let’s see if restoring the system to an earlier state helps. • Log on to Windows as an administrator.
• Click Start, All Programs, Accessories, System Tools and then click System Restore.
• On the “Welcome to System Restore” page, click to select the Restore my computer to an earlier time option, and then click Next.
• On the “Select a Restore Point" page, click the most recent system restore point when you believe your system was working OK and then click Next.
Note A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.
• On the “Confirm Restore Point Selection” page, click Next. System Restore restores the previous Windows XP configuration, and then restarts the computer.
• Log on to the computer as an Administrator. Then click OK on the System Restore “Restoration Complete” page.
If this allows you to start your computer normally, please run the following tools by following the instructions below.

NOTE: If you are still unable to run them in normal mode, try running them in safe mode.


OTL Custom Scan

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Click on Minimal Output at the top
• Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
• Double click inside the Custom Scan box at the bottom
• A window will appear saying "Click OK to load a custom scan from a file or Cancel to cancel"
• Click the OK button and navigate to the file scan.txt which we just saved to your desktop
• Select scan.txt and click Open. Writing will now appear under the Custom Scan box
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won’t take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

Scan With RootKitUnHooker

• Please Download Rootkit Unhooker and save it to your desktop.
• Now double-click on RKUnhookerLE.exe to run it.
• Click the Report tab, then click Scan.
• Check (Tick) Drivers and Stealth
• Uncheck the rest. then click OK
• When prompted to Select Disks for Scan, make sure C:\ is checked and click OK
• Wait till the scanner has finished and then click File > Save Report.
• Save the report somewhere where you can find it. Click Close.
• Copy the entire contents of the report and paste it in your next reply.

Note** you may get the following warning, just click OK and continue.

"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"

Logs to include with next post:

OTL.txt
Extras.txt
RKU log

Thanks

Satchfan

Hello insecure lee It has been several days since I asked you to follow some steps to help diagnose your computer problems. Please let me know if you still require help. Thanks Satchfan

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic