please help !

[essexboy]

Could you now run another Avast scan please

[carlwt2007]

this is a nightmare!!

http://www.mediafire.com/?sharekey=2584fbab63c12d46ab1eab3e9fa335ca43c1354fe47e55e1

[essexboy]

Do you use a router ?

[carlwt2007]

no i dont !

[essexboy]

OK time for the big one

Save these instructions so you can have access to them while in Safe Mode.

Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop. 
• Reboot your computer into SafeMode.

[indent]You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight SafeMode then hit enter.[/b][/indent]

• Double click the setup file to run it.
• Click Next to continue.
• Accept the Licence agreement and click on next
• It will by default install it to your desktop folder.Click Next.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• Hidden Startup Objects
• System Memory
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have) [/color]
  

Leave the rest of the settings as they appear as default.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then chooose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
  
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  Note: This tool will self uninstall when you close it so please save the log before closing it.
  

[/b]

[carlwt2007]

wow that took forever lol!

[essexboy]

That is a very thorough scan it checks every file, and it appears that a legitimate file Farmhelper was infected

Once again - does Avast detect anything ?

[carlwt2007]

i haddent tried it yet!

[essexboy]

OK I will hang around 

[carlwt2007]

i just started avast!

[essexboy]

Fingers crossed 

[carlwt2007]

ok avast is still running but now the worm is in the c:\ system volume information\_Restore

[Lisandro]

ok avast is still running but now the worm is in the c:\ system volume information\_Restore

This is the System Restore folder.
If you disable/enable the System Restore you'll delete all restore points and with them, the infected points and files.

[carlwt2007]

i shutdown restore and now running avast again!

[carlwt2007]

  ok i did what tech said an i turned off the sys restore  then i ran avast and it had no problems!! ye haw!! lol

thank you all so very much for all your time and trouble !! you guys  are the best!!