Actulice modF ...need help

[triplec]

My daughter has somehow received what I guess is a virus.
We get a little dialog box that pops up with the word actulice and the word ModF.
Is this a virus?
Will Avast (which I don't currently have on her computer yet) work?
If so which do I download? Free Avast! 4 Home Edition or Avast! Virus Cleaner ...or both?
I emailed Avast ...but have not heard back yet!
Thanks in advance for your help!
Pat...

[inthewildteam]

This sounds like a trojan, not a virus.  You might find this difficult but not at all impossible to remove.

To help us here, we need your operating system details, any patches/updates.  Your current anti-virus solution and any other security programmes that you use.  Could you also do a search (on your pc) for the file "pup.exe" without the quotes?

Also delete your temp internet files, cache and cookies too.

[triplec]

I'm not great at this ...but here goes.
It's Win ME...patches are not updated ...but I did start going through and adding these the other day ...When she was away at school ...unfortunately these did not get updated.
Any way ...I found these 3 things:
winpopup C:\ windows
pup C:\ windows
pup C:\ program files
I think these might be associated with the Microsoft Popup Utility?
Currently has Norton AV ...but again not upto date.
I added spybot ran it ...and deleted all it found.
Thanks Pat...

[inthewildteam]

I had a feeling about this, you are going to have a lot of work to remove this from your system.  If you follow Eddy's excellent links from the url I'm linking to in this thread you will remove it.  This is going to take a lot of time and you need to follow all the steps outlined ............. all of them.

If you don't feel competent or have questions about any of them post back, there are many on here who will help.

http://members.home.nl/edeijl/acred/cleaning.htm

[triplec]

Thanks so much ...I'll give it a try!
Again thanks ...I'll let you know how it goes!

Later,
Pat...

[inthewildteam]

Thanks so much ...I'll give it a try!
Again thanks ...I'll let you know how it goes!

Later,
Pat...

Obviously, as your details suggest you are hosting a business site, you will be in contact with Alwil if these forums produce a solution to your problems, and as a matter of simple business practice, you might like to contact them?