Please help! Had Defender virus warning - Now desktop icons have vanished!

Browntoa

this thread

http://www.malwarebytes.org/forums/index.php?showtopic=8894&pid=44354&mode=threaded&start=

Reluctant_spender

Hi, having looked at that thread I am going to wait to see what happens. My concern is that there is something which I can't see stopping that file from being deleted and or replacing when we try.

Old_Sherlock

My concern is that there is something which I can't see stopping that file from being deleted and or replacing when we try.

My thoughts as well ..Possabily Polymorphic .

This seems to works well

http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

Reluctant_spender

yes with a rootkit as a payload was the way I was heading - Gmer is very good but the logs are awful to read

Old_Sherlock

Yeah ... that always the problem with situations like this unfortunately .

paddywak

Was reading the last few posts and it looks very complicated. Should I still wait for confirmation Browntoa that the advice is safe to use or try that rootkit thing old sherlock suggested? What is a rootkit anyway?

Browntoa

we are still waiting for the clear , they are still trying stuff on that thread

paddywak

I would like to thank all the computer people who did their best and spent so much time trying to help me getr rid of a trojan.

I eventually used the malwarebytes site and it worked. My only problem is the computer is now quite slow. I believe I may have a lot of software added and so need to delete some. Sanqib gave some advice earlier is these posts so must follow the instructions.

You guys are so thoughtful and I can't thank you enough for your time and patience.

Thanks again.

aliEnRIK

Glad your sorted Paddy
Aside from a firewall and your main anti virus. You dont really need anything else running 'on the fly'

paddywak

Thanks for the information. Which anti virus would you suggest - AVG or Avast think have both on system. Should I keep Malwarebytes, Combofix and CCleanup on also have Hijack? Suppose they're not really necessary but just want to check if o.k. to get rid.
Thanks