worm.win32.netsky (2 logs ready) appreciate any help.

Okay, no more USB work for now.

Can you use the internet on this infected machine? the logs look okay now the malicious files I saw are gone.

Yeah I think it should be fine it looks good anyway, just didn't want to risk it, but yeah it should be good.

What's next friend ?

Update and run one more MBAM scan, post the resulting log.

Here she is :


Malwarebytes' Anti-Malware 1.43
Database version: 3490
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/3/2010 7:53:01 PM
mbam-log-2010-01-03 (19-53-01).txt

Scan type: Quick Scan
Objects scanned: 128195
Time elapsed: 13 minute(s), 21 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Judy\Local Settings\Temporary Internet Files\Content.IE5\WQMYPWL8\bhrnbylv[1].htm (Trojan.Dropper) -> Quarantined and deleted successfully.

We can remove OTMoveIt now.

• Please double-click OTM.exe to run it again.
  
• Press the green CleanUp! button.
  
• Press Yes cleanup process prompt, do the same for the reboot prompt.
  

How is the machine running now?

She is running like Marion Jones sauced up at the Sydney olympics.

Thanks so much Belahzur, I registered at three seperate websites to post my problems and have yet to obtain a single response, found GeekPolice today and now I'm back up and running in a couple hours. Top notch support, thanks again.

You have to start a new topic with your problem because every computer has different logs and a admin will help you out.

I had to use my friends computer to download the removal software's to a usb stick and then run it on the infected computer from the usb stick.