Virus help! And also can't delete AVG free edition??!

aliEnRIK

After Avira id suggest an online kaspersky scan. BUT it will only highlight the problems it WONT remove them

aliEnRIK

hijack ~ not sure to be honest. But so many nasties have been removed its bound to cause some other problems. It should settle in time (IF we can completely clean it)

Ideally it should be formatted and windows reinstalled

DEBTMONKEY1A

Hi Alienrick-log below. Nothing found! 1 warning...not sure what that's about??! I hope the log below is for a full scan as I seem to remember that the 1st time you use AVIRA it's a shorter scan (when i installed it I did not let it do it's 1st quick system scan). Will do kasperspy & post later (think it takes at least an hour!).

So I did have lot's of nasties on my computer?? Just out of interest-what do these bugs actually do? Keyloggers? Hacks? I had a bug about 1/2 a year ago-can't beleive how clever it was-somehow I kept getting a screen/toolbar note saying 'your computer is infected-please download this programme' (didn't of course!)-clever thing was it 'greyed out' the start menu so I couldn't get to spybot, etc or system restore-how clever is that??! Went in to safe mode & ran spybot & that sorted that. 2 days ago-when i was having the problem with pages coming up that I did not ask for on google searches (!)-every time i double clicked on spybot or malwarebytes NOTHING happened-they would not open??! Surely a virus is not clever enough to have something 'built in' to protect themselves & stop these scanneers opening??! How clever is all this...will post kasperspy later-again thanks fir all this!

LOG-AVIRA


Avira AntiVir Personal
Report file date: Tuesday, May 19, 2009 11:57
Scanning for 1400984 virus strains and unwanted programs.
Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : FUTURE-82YVYMU0
Version information:
BUILD.DAT : 9.0.0.394 17962 Bytes 17/04/2009 11:20:00
AVSCAN.EXE : 9.0.3.5 466689 Bytes 17/04/2009 08:57:30
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 10:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 11:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 10:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 12:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 20:33:26
ANTIVIR2.VDF : 7.1.3.185 2010112 Bytes 12/05/2009 07:53:50
ANTIVIR3.VDF : 7.1.3.228 186368 Bytes 19/05/2009 10:56:25
Engineversion : 8.2.0.168
AEVDF.DLL : 8.1.1.1 106868 Bytes 19/05/2009 07:54:00
AESCRIPT.DLL : 8.1.2.0 389497 Bytes 19/05/2009 07:54:00
AESCN.DLL : 8.1.2.3 127347 Bytes 19/05/2009 07:53:59
AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 18:24:41
AEPACK.DLL : 8.1.3.16 397686 Bytes 19/05/2009 07:53:58
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 20:01:56
AEHEUR.DLL : 8.1.0.129 1761655 Bytes 19/05/2009 07:53:57
AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 20:01:56
AEGEN.DLL : 8.1.1.44 348532 Bytes 19/05/2009 07:53:53
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 14:32:40
AECORE.DLL : 8.1.6.9 176500 Bytes 19/05/2009 07:53:52
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 14:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 08:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/2008 10:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 14:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 10:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 15:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 10:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 15:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 08:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 10:32:10
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09/02/2009 11:45:45
RCTEXT.DLL : 9.0.37.0 86785 Bytes 17/04/2009 10:19:48
Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Start of the scan: Tuesday, May 19, 2009 11:57
Starting search for hidden objects.
'16991' objects were checked, '0' hidden objects were found.
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'Wilog.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'AutoUpdateSrv.exe' - '1' Module(s) have been scanned
Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'historyeraser.exe' - '1' Module(s) have been scanned
Scan process 'PSFree.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'zlclient.exe' - '0' Module(s) have been scanned
Scan process 'WinPatrol.exe' - '1' Module(s) have been scanned
Scan process 'igfxtray.exe' - '1' Module(s) have been scanned
Scan process 'WebUpdateSvc.exe' - '1' Module(s) have been scanned
Scan process 'client32.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'vsmon.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
29 processes with 29 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Starting to scan executable files (registry).
The registry was scanned ( '56' files ).

Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.

End of the scan: Tuesday, May 19, 2009 12:33
Used time: 36:15 Minute(s)
The scan has been done completely.
4522 Scanned directories
192522 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
1 Files cannot be scanned
192521 Files not concerned
1844 Archives were scanned
1 Warnings
1 Notes
16991 Objects were scanned with rootkit scan
0 Hidden objects were found

aliEnRIK

Aviras found it to be clean (I dont think it is though)

run a KASPERSKY ONLINE SCAN (click to scan 'MY COMPUTER')
http://www.kaspersky.co.uk/virusscanner
Please post the complete log it creates (This only SCANS it DOESNT delete anything, so we'd need to see anything it finds)

aliEnRIK

Nasties found? Hard to say but certainly some trojans (nasties hidden within files). Some malware too

DEBTMONKEY1A

Alienrik-Kasperspy won't load due to an 'applet failure' (?!!!)-tried a few times but same error. Any other way i can run kasperspy or can you reccomend another online scanner??

aliEnRIK

Have you got JAVA installed?
If not install that
http://www.java.com/en/

If that doesnt work then use a different browser

DEBTMONKEY1A

Got this link http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/ from a forum-to download-is it the same thing?? I'm also downloading java as we speak!

aliEnRIK

well no

Wether its safe to use or not ive no clue

DEBTMONKEY1A

After Java installed now working-will post logs later. (Think its 1 1/2 hrs or so to scan??!).

Again-thanks for your time & patience! Which of my already installed scanners are in your opinion the best & how often should I run them? Also-I read somewhere to delete system restore old points? Also found out from the web that one of the virus's I had was the google redirect virus...that took the longest to clear!