Help !!!!! please aspparantely have a virus worm.........

[Pondus]

had to keep my sugar level ontop..

I am working on it ....

http://theforeigner.no/pages/news/norwegians-eagerly-munch-marzipan-at-easter/

[*tisha*-uk]

Hi essexboy...
just tried to scan with gmer but it stopped working first time windows
showed box saying it had stopped working & lookin for a solution..
so tried again and windows closed pc down.. had to start up again???
i have a problem with stopping the s-antispyware can't find a button to turn it off
..could that be the reason or one of the reasons???
do i have to close windows firewall aswell...and i think defender is still on?? though i
have security essentials now as i find it better..
 

[essexboy]

OK lets use the heavy duty safe mode scan

Save these instructions so you can have access to them while in Safe Mode.

Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop. 
• Reboot your computer into SafeMode.

You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
Use your up arrow key to highlight SafeMode then hit enter.[/b]

• Double click the setup file to run it.
• Click Next to continue.
• Accept the Licence agreement and click on next
• It will by default install it to your desktop folder.Click Next.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• Hidden Startup Objects
• System Memory
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have) [/color]
  

Leave the rest of the settings as they appear as default.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then chooose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
  
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  Note: This tool will self uninstall when you close it so please save the log before closing it.
  

[/b]

[*tisha*-uk]

do i have to boot safe mode with net connection or just safemode??

[*tisha*-uk]

sorry forgot to ask if i should turn off all my antivirus and firewall and
the superantispy

[essexboy]

No need to disable anything as it will be running in safe mode, no need for internet connection

The will analyse every file on your computer and may take an hour or so - it will check all the MP3 files for infection

[*tisha*-uk]

OK good I'm onit...

[*tisha*-uk]

Hope your still there essexboy...
just finished the scan .. it found a trojan..
the same one mbam found when i first installed it in 2009 nov.
so it looks like it expanded..
i could not save the file in safe mode ..
it is still on my desktop in the set-up.. but cannot find a way to save it..
I can write it for you.. ,the lof only consists of 3 sentences..
tisha*

[*tisha*-uk]

OK I figured out how to send it
here it is...
lol... 
catch you in a few hours
tish*

[*tisha*-uk]

Hey Hi essexboy...
did i send the result properly??
I'm not so technical only been on 1 forum before this..
"ms forum....because i got problems with bitdefender security trial..
it confused my pc.. got advice from them to install avast & mbam"
been fine up till now..

The file that kas found was in D.. that is my socalled recovery ..??
is that not the original factory settings???
strange it got in there....
when you get a chance let me know what to do now...
greets very appreciative  *tisha*

[essexboy]

OK I feel that was probably a false positive as it was found using Heuristics (guessing  )

What problems do you have at the moment as all my scans are coming up clean

[*tisha*-uk]

Hi at bthe moment i dont have any problem ...
but i did put the file in quarantine.. kas..
have i done s0mething seriously bad???
ohh noo..

[essexboy]

No, because it was an old version of Flash - no harm


Run OTL and hit the clean up button and it will remove the tools we have used 

[*tisha*-uk]

Do you mean open otl then click clean button.. or do i have to run a scan first???
sorry for being so naive...
but I'm a grateful learner...

[essexboy]

Open OTL and hit the cleanup button and you are done