@Tarq57,
I have MBAM, it did not find any virus. However I cannot update MBAM, because the virus crashes MBAM when I try to do an update. Would there be any purpose in uninstalling MBAM and downloading and installing a fresh copy? (assuming the virus would let me...)
I have SuperAntiSpyware (SAS), and it did not find any virus. Also, I cannot update SAS because the virus stops it and makes it give the error message: "There was an error trying to retrieve definitions. Make sure your firewall is not blocking SUPERANTISPYWARE.EXE from accessing the Internet". The only software firewall I have is windows firewall, so I went in there and couldn't find SAS listed, so I manually added SUPERANTISPYWARE.EXE and SSUpdate.exe to allow them to access the internet. Then I tried to update again and got the same error. (I suspect SAS never needed to be in that list, since I was updating it find before this virus, and I'm assuming it was never in the firewall list...)
I will try Dr Web's Cureit, and some of those anti-rootkits you mentioned. Update: Actually I might not need to since my Avast updated now (see below)
@Tech,
My servers.def does display [servers] on the first line and then has a bunch of servers listed at avast.com. So I assume this file is fine.
I connect to the internet with cable. None of the other computers on my network run avast.
I tried your idea to change the Update (Connections) setting and switched it to Direct connection (no proxy) And now I am able to update!!!
Why oh why would Avast's default behaviour be to use "Auto detect (use Internet Explorer settings)" Internet Explorer?! That's like letting a convict babysit your kids. So, am I to understand that a virus corrupted IE's settings (which let's face it, is not hard to do considering how lousy IE is) and then Avast uses those settings? Maybe I'm just not understanding what the setting means, and maybe it doesn't mean that, but if it does I'm fairly horrified :|
As soon as I updated I got a warning that I have Win32-KillAV-KS [trj]
So now time for me to see about removing this thing. Thanks very much for the help guys!
(By the way, another symptom of the virus is that it crashes Winamp)