Serious Virus Problem!?

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Use Task Manager to terminate the worm process (it may be called "spoclsv.exe").

2. Delete the original worm file (the location will depend on how the program originally penetrated the victim machine).

3. Delete the following parameters from the system registry (see What is a system registry and how do I use it for details on how to edit the registry).

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]

"Svcshare" = "%System%\drivers\spoclsv.exe"

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]

"Svcshare" = "%System%\drivers\spoclsv.exe"

Delete the following file:

%System%\drivers\spoclsv.exe

Delete all copies of the worm from the hard disk.

Delete the following files:

autorun.inf

setup.exe

from the root directories of all removable disks.

4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

In order to remove this worm completely, every PC need to have the latest anti-virus.

Last year, my office have over 2000 PCs that have Fujack infection and it took a few months to clean every PC. This is because my company use Symantec and the Symantec live update in some PC's stop updating for no reason. This prevent the outdated Symantec anti-virus from detecting the worm. The worm come back to the share network drive everyday after Symantec anti-virus on the server delete it from share drive. The problem was solve after the administrator sent the latest anti-virus update to every PC owner and ask them to manually update their anti-virus.

Currently, we have another worm in our network. W32.looked

We are unable to clean it because we don't know where it come from.

But whenever symantec delete it from share network drive, it will be back the next day. The administrator have sent the latest update to the PC owners but the worm is still active in the network.

I don't think there are any utility that can cure or clean / heal infected files. Corrupted program files like excel or words need to be reinstall.

Worm.Win32.Fujack. aka WIN32.FuJack.l, W32.Fujack.J, W32.Fujacks.q etc.

As well as counterspy as has already been suggested use A-Squared Free:

http://www.download.com/A-squared-Free/3000-2239_4...

This is not a limited version but a full tool to clean your computer from Malware, Spyware, Trojans, Backdoors, Worms, Dialers and Keyloggers.

How to use:

Download, install and it will ask to check for updates, which should be allowed and will take a few minutes initially, it will then restart the program for updates to take effect. Click on Scan and ensure deep Scan is selected then click the Scan button.

@ spitfire - your link to 2squared is unsafe - Used for the distribution of "rogue" security or other such applications.

http://hosts-file.net/?s=2squared.com

You have 2 options at this point: 1. reformat the hard drive and then reinstall your operating system. 2. Take it to a computer repair service. The problem you are having is extreme and your options are limited. I had a similar problem and ended up having to reformat. Know now however, reformatting erases everything on the hard drive, so hopefully, you backed up everything to an external disk or storage. Good luck, that's a tough issue.

WIN32. FuJack virus there are few types of WIN32. FuJack virus, it's a worm therefore I would try a free trial of counterspy:

http://www.counterspy.com/

I know its in there data base.

Good Luck.

@spitfire one of your links is unsafe:

http://www.siteadvisor.com/sites/2squared.com?vers...

Try Norton 360 and scan your computer to delete the virus.

You should have a corporate account with an antivirus software firm. You contact their headquarters and get them to help as that what comes with the corporate account and why you pay them.

You need to do this so that they can update the protection to stop you from getting it again, not mentioning the corporate buisness that you may spread the virus to.

This is a very bad Trojan Clicker or a worm. I hope you have the worm, but since you have so much trouble with getting it away it looks more like the Trojan.

Try free Trail of Counter Spy, run it in the safty mode, and delete everything he is finding. I had until now everytime luck with this and it seems like this is currently the only Virusprogramm who can get rid of this nasty Trojan Backdoor.

If this doesn't work try Combofix, or

http://www.sophos.com/support/disinfection/filvir....

http://www.2-spyware.com/remove-fujacks.html

Looks like you have a fast spreading, anti virus-disabling worm.

These 2 links are information.

http://www.symantec.com/security_response/writeup....

http://www.symantec.com/security_response/writeup....

This is a removal tool. An anti-virus won't work, since it disables the anti-virus.

http://www.2squared.com/glossary_details.php?ID=31...

Good luck!

With that size network I would suggest that you go directly to somebody who knows exactly how to fix the whole system . Try http://www.nicklockard.com/ as they will handle the full network : This can grow so we need to contact someone soon