Help please lots of viruses

[jholland1964]

Looks pretty good. Your thread title Help please lots of viruses was an Understatement.
Malwarebytes' Anti-Malware remove-55 infections
You did two scans with ESET Scanner, the first one showed 255 infections but you didn't clean them at that time according to the instrucitons by PP.
At that time I noticed you had P2P File sharing programs running ALL THE TIME in the background so I told you to turn them off and leave them off until we were finished and you did. I could have quit this thread at that time, but I chose not to. So I had you run ESET again and that time have it clean...on the second scan 257 infections were found and removed, so 2 more were added between the scans.

Then I had you run combofix. The first run showed and removed12 infected files, but I found numerous other Unknowns in that log and had you remove those using the CFScript. That was an additional 117 unknown and very likely files created by these infections.
But there were 5 files in that CFScript which were not removed so I had you upload those to virusscan. Two of them showed as infected the other three were unknowns or unable to be scanned.
So I had you use Killbox to remove all five.
We are talking here about 446 infected files on your computer.
Now I have to say something here because it is obvious to me that most of your infections were the result of P2P file sharing. Quite frankly, we rarely will even consider helping with a computer which has infections which are obviously the result of file sharing. It is not something we condone or approve of. I had gotten far enough into the clean up of your computer before I discovered, while checking through the various logs that most of your problem was the result of file sharing. Most of the time if we know this we tell people to go else where, we don't approve, we don't condone it, we don't encourage it.
Our Forum Guidelines state very clearly:

Discussion of illegal activities such as software and music piracy and other intellectual property violations are not allowed.

Yes, sharing copyrighted material IS a CRIME, a felony in fact.

We do not ask you to stop this without reason.
P2P programs open a direct line onto your computer, security measures are easily avoided, and Malware writers are increasingly using them to spread their nasty infections onto your computer. Add to that, if your P2P program is not configured correctly you may be sharing more files than you intended. There have been cases where people's Passwords, Address Books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured program.
Many of the programs come bundled with other unwanted programs, but even the ones free of any bundled software are not safe to use.

When you use them you are downloading software from an unknown source directly onto your computer, bypassing your Firewall and Anti-Virus software. Hardly surprising then that many of these downloads are being targeted to carry infections.

We see no reason in taking our time cleaning your machine if you use P2P programs, as it is pretty much certain that if you continue to use them then you will get infected again. The only reason I continued on yours was because I felt I had gotten too far in the process to stop. But I say here, and now, I will NOT do it again.

You MUST really give serious thought to getting rid of those file sharing programs. No matter how safe they claim they are they can offer no guarantees.

I use this analogy often when speaking of P2P file sharing;
If you sat down at a table in a restaurant and there was a sandwich sitting there on a plate with just a tiny bite taken out of it...would you eat it? I am sure your answer would be no. Why? Because it might contain just 1 germ from the person who took the bite (and you have NO IDEA who that is), which if YOU took a bite, could kill you. By using P2P file sharing you allowed 446 infected files onto your computer, any one of which could have killed your computer.
Think about it.
And I say again, if your computer is reinfected due to file sharing, we will not help you clean it.

[dirtySLART]

ok thanks for all your help, I appreciate it.
Alex

[dirtySLART]

hey again.. I'm having problems with my internet connection i've only realised it today that these problems have occured around the time I did this clean up of all these viruses.. I don't know if it was the clean up or something else.. but I'm just checking here to see if you think there could have been something?

I'm Always connected to the internet.. but sometimes my connection drops speed or something.. it's still connected to the net but it cannot browse and noone can send msgs to me on my IM, then after abit it's all fine and everythings working perfectly.. it does this throughout the day.

Do you have any idea?

[jholland1964]

We need to see at least a HJT log.

[dirtySLART]

ok here

[dirtySLART]

I have been trying to search on google this problem but only thing i could find was a windows update problem or maybe the clean up we did.

[jholland1964]

Can I ask you to re-read the LAST line of my last post to you back in September?

And I say again, if your computer is reinfected due to file sharing, we will not help you clean it.

This new log shows me that this is still your "hobby"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
Running automatically when the computer starts.
This is processes running when you did this log;
C:\Program Files\BearShare\BearShare.exe
Please read this information concerning BearShare

The bearshare.exe application is the main application for the BearShare filesharing software. Some versions of this software contain spyware so it is advisable to terminate the bearshare.exe process.
bearshare.exe is considered to be a security risk, not only because spyware removal programs flag BearShare as spyware, but also because a number of users have complained about its performance.
BearShare is likely spyware and as such, presents a serious vulnerability which should be fixed immediately! Delaying the removal of bearshare.exe may cause serious harm to your system and will likely cause a number of problems, such as slow performance, loss of data or leaking private information.

And to that I say, sorry, since you did not previously heed the advice I gave you concerning file sharing, you are on your own.

[dirtySLART]

I ran this program http://www.snapfiles.com/get/winsockxpfix.html
winsock XP fix program.. everything seems to be working fine so far but I'll let you know if the problem is still there.

[jholland1964]

=dirtySLART;41630]I have been trying to search on google this problem but only thing i could find was a windows update problem or maybe the clean up we did.
I ran this program http://www.snapfiles.com/get/winsockxpfix.html
winsock XP fix program.. everything seems to be working fine so far but I'll let you know if the problem is still there.

I can tell you right now this had absolutely NOTHING to do with the Fixes done earlier so please do not imply this. You had 446 infected files on your computer. Maybe the removal of these infections affected your connection...yes...because you were infected with multiple Downloader Trojans, and what do those do? Downloader.Trojan accesses and downloads from various sites. And what do they download? More infections, your logs proved that. Yes, the clean up maybe broke some connections used by these trojans but the clean up was supposed to clean the computer of infections, it did. But you are still participating in file sharing which was the likely root of the 446 infections in the first place.