Ok, so I am pretty sure I have this problem fixed...
I didn't do much though haha. I don't think the computer was actually infected. I think that a piece of the virus was located on my computer(i think in C:/documents and settings/users/start menu/programs/startup).
I also agree that it is the carberp virus so if you actually get infected be very careful because it steals your identity and personal data...
Ok here is what I think:
About the virus:
I got it from a random web page.
When I got it, it was a really small piece so it wouldnt get detected.
That piece works by saving itself in your startup folder and/or temp and then running on reboot.
once the computer is rebooted the virus runs and downloads the rest of the virus(the really bad parts which avast keeps blocking!)
You cant see this file in windows explorer or search for it, I guess its super hidden, haha.
You can see the file(if it is still there) using this cool application I came across called GMER.
Since the piece was located in startup and/or temp, it ran once the computer re-booted.
now, since avast is so good, it blocked the other files that little piece tried to download from the net,
that is why you would always get the warning saying the virus was blocked.
The virus keeps trying to download the main pieces from online so you keep getting popups.
What I did:
I cleared all my temp, temp internet files, cookies, etc. using windows explorer(I think i got it using K-meleon browser)
Ran Avast multiple times and ran the scan from starting boot thing too.
Also cleared my private data using the browser's tool (tools->clear private data)
I don't get any more messages from avast and no files are infected upon scan.
Other Thoughts, Hints, Tips:
Malware Bytes, although an awesome program, in this case did nothing. returned no warnings, and found no viruses
A tip I found online to see if you have the full virus is to download process explorer from microsoft and do these steps:
Download
Run
have explorer.exe highlighted
click view -> show lower pane
scroll to almost bottom and look at all the "threads"
check for threads running with the name of something like "no process"(basically is running from no where.
if you find one or more, sorry but you probably have the virus...
if there aren't any running then most likely your clean
you can also use the program ccleaner which will thoroughly clean your temp and other files, its a good program!
So this is all my info, hopefully im not wrong about everything haha I also hope this helps.
If my problem comes back I will let everyone know and I might need a little help because if it does come back obviously I wasted a lot of time and am pretty dumb haha.
Thanks for all the help everyone!
