Need help please! infected and avast doesnt delete

[Jurgen2000]

Dear Forum, dear avast team,

sorry to bother you but I need help! I am infected and the file cant be deleted because it says it is used. What can I do? Now?



Malware Bytes anti malware doesnt find anything!
I am scared...

Thank you for every help. Happy holidays!

[Jurgen2000]

It says: Cant be deleted because the process is used.

It cant be moved into the containter either.

I am grateful for every help. I fear someone send me a virus / malware.

It seems it happened 8 hours ago. this is a screen of the infected file.



Thank you for every help. Such things really scare me.

[Pondus]

follow instructions and attach logs (not copy and paste)  http://forum.avast.com/index.php?topic=53253.0

we need Malwarebytes / OTL / aswMBR logs

[Jurgen2000]

I dont know how to do this. is this a serious thing?

[Pondus]

I dont know how to do this. is this a serious thing?

read the instructions and follow it ...it is very easy



i will notifi the removal experts and see if they can give you a step by step instructions here in your topic
it may take hours before they are online

[Pondus]

you already have Malwarebytes installed ....so you know how to run that?
make sure it is updated, run quick scan ... click remove selected if anything is found and attach log

[Jurgen2000]

Thank you very much!
 I really appreciate the support! I am scared.
I read somewhere it is a bad virus. What do I do if it spreads?  What if the virus comes back after it jumped down just to avoid the scan?

MALWARE bytes didnt find anything!

here are the logs in attachement:

[Pondus]

MALWARE bytes didnt find anything!

and it was updated when you did the scan?

ok .... now run aswMBR and attach that log .... you are doing fine here   

[Jurgen2000]

Thank you!  :`)

I feel better now even if it is still on there.

here are the logs:  yes malwarebytes was updated:


thank you! lets hope for the best

[Pondus]

good ...no be patient and wait for the removal expert to arrive
as said it may take hours ....and this is the day before the day so they may be busy with christmas stuff   

[Jurgen2000]

I didnt run aswr from desktop, is that bad?

should I run it again?

yes. I totally understand!!!  I really appreciate that you do this. I have the feeling that whoever infected me did this on purpose before christmas because i may not get people to help me. thank you!


I have not restarted my PC yet. Can I go offline and come back tomorrow? what if I cant use my PC tomorow anymore?  how can I see your forum? 

[TwinHeadedEagle]

Logs look clean, this if False Positive detection...

[Jurgen2000]

Are you sure?

But it says:  High Danger /  File infected

And the file has been changed today. ( see screenshots )

[Jurgen2000]

Does this mean everything is okay?  Sorry if I bother you, but how can he be so sure that it is a false positive?

Was he the removal expert?  If yes, thank you Sir for your time and the quick response. I really appreciate it.

Please leave the thread open in case I cannot use my PC tomorrow or if things got worse.

Would be nice if someone can give me a " yes it is clean " answer.

Thank you very much! Happy holidays! Merry christmas!

[Pondus]

Was he the removal expert? 

yes and he will be back...they are in and out of the forum

Sorry if I bother you, but how can he be so sure that it is a false positive?

upload the file detected to www.virustotal.com and test with 40+ malware scanners (if scanned before, click new scan)
post link to scan result here

alternatives: www.metascan-online.com / www.jotti.org