[Closed] Help ! Can't seem to get rid of !

scotty, having trouble running combofix.exe, telling me today's date and copy is expired, please install updated copy? Would you know how I go about doing that?

Hi

Renee6 Im afraid I may have bad news coming your way. I need you to follow the next instruction. If it begins to take hours and is finding hundreds of infected files, stop the scan and post the report it gives.

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then start to download the latest definition files.
• Once the scanner is installed and the definitions downloaded, click Next.
• Now click on Scan Settings
• In the scan settings make sure that the following are selected:
  • Scan using the following Anti-Virus database:
    
    + Extended(If available otherwise Standard)
  • Scan Options:
    
    + Scan Archives
    + Scan Mail Bases
• Click OK
• Now under select a target to scan select C:\Windows
• The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
• Now click on the Save as Text button
• Save the file to your desktop.
• Copy and paste that information in your next post.

With the exception of Internet Explorer, which is needed for the Kaspersky Scan, keep ALL programs closed until the scan is complete.

Let me know your thoughts, Thank You Scotty, Sincerely Renee6 ——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Monday, November 19, 2007 10:27:13 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 19/11/2007 Kaspersky Anti-Virus database records: 461543 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 42177 Number of viruses found: 11 Number of infected objects: 1943 Number of suspicious objects: 0 Duration of the scan process: 01:01:09 Infected Object Name / Virus Name / Last Action C:\aolextras\sm\sm3.exe Infected: Virus.Win32.Virut.av skipped C:\directx\dxsetup.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\AOL Explorer Screensaver\aexplore.scr Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\AOL\AOLCoach\en_en\AdpTemp\BldLctn.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\Jpelc1998\mydb.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\Jpelc1998\toolbar.lst Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\idb\SNMaster.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\OptScan.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\CACHE\jpelc1901 Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\jpelc1998 Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\jpelc1998.abi Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\organize\jpelc1998.aby Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstderr.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstdout.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aoltsmon.lock Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\cache.db Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\server.lock Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstderr.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstdout.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\cache.db Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\ncoc Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\server.lock Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\BFTS\BFTSDatabase.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL Downloads\aolcom_setupSTUS\comps\flash\flashax.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\AOL Downloads\waol.4327.165.1\comps\vwpt\VPPrePop.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_3d001c_c53cb4d\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f1428131db5a7927a440928f4e11f49_01899df6-13d9-4c27-9961-82720d56058c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\My Documents\New Folder\New Folder\crack.exe~ Infected: Trojan-Downloader.Win32.Agent.ejh skipped C:\Documents and Settings\LocalService\My Documents\New Folder\New Folder\install.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\AOL\C_AOL 9.0\IDB\Apps.Lst Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\AOL\C_AOL 9.0\IDB\art.idx Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\AOL\C_AOL 9.0\IDB\sap.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\AOL\C_AOL 9.0\IDB\spool.lst Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\AOL\C_AOL 9.0\IDB\sysnews.lst Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\gdql_lsa_LinksysAgent.log Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\glog.log Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\LinksysAgent.log Object is locked skipped C:\Documents and Settings\Renee Loiselle\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\LinksysAgent_GTActions.log Object is locked skipped C:\Documents and Settings\Renee Loiselle\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\Desktop\Hijackthis\HijackThis.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\Wildtangent\CdacacheA03746C-E165-4493-ADF8-DACB1749355C\Racing.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\Wildtangent\CdacacheA03746C-E165-4493-ADF8-DACB1749355C\start.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Application Data\Wildtangent\Cdacache\D3B5D7A2-C079-4AED-9ACD-9576D2A05854\CutToTheBeat.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temp\me_FevOxbJ6fZlRKFl Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temp\me_JoT53cYqpEFJ2N4 Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temp\me_W6UVQJbI487giYi Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temp\me_yXPPYRIEcDRi9LO Object is locked skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temporary Internet Files\Content.IE5PUVGXQZ\blank[1].htm Infected: Worm.Win32.Mefir.p skipped C:\Documents and Settings\Renee Loiselle\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe/data.rar/keygen.exe Infected: Trojan-Downloader.Win32.Small.gmx skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe/data.rar/crack.exe Infected: Trojan-Downloader.Win32.Agent.dlu skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe/data.rar/serial.exe Infected: Trojan.Win32.Dialer.qn skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe/data.rar/install.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe/data.rar Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\code for winzip 11.1.exe RarSFX: infected - 5 skipped C:\Documents and Settings\Renee Loiselle\My Documents\desktop\crack.exe Infected: Trojan-Downloader.Win32.Agent.ejh skipped C:\Documents and Settings\Renee Loiselle\My Documents\desktop\install.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\desktop\keygen.exe Infected: Trojan-Downloader.Win32.Agent.dlu skipped C:\Documents and Settings\Renee Loiselle\My Documents\desktop\patch.exe~ Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\install.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\install.exe~ Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\dumphive.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\exit.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\GenericRenosFix.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\HostsChk.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\Process.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\Reboot.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\restart.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\SmiUpdate.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\swreg.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\swsc.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\swxcacls.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\unzip.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\My WinZip Files\SmitfraudFix\WS2Fix.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\Unzipped\keyfinder.2.0.beta.2.5[1]\keyfinder.exe Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\My Documents\winzip 11.1 code\install.exe~ Infected: Virus.Win32.Virut.av skipped C:\Documents and Settings\Renee Loiselle\ntuser.dat Object is locked skipped C:\Documents and Settings\Renee Loiselle\NTUSER.DAT.LOG Object is locked skipped C:\HASBRO\TONKA_RACEWAY\Uninstall_Tonka_Raceway.EXE Infected: Virus.Win32.Virut.av skipped C:\Program Files\Acer Inc\Acer GridVista\GridVistaU.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Acer Inc\Acer GridVista\GridVistaU64.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Adobe\Adobe Help Viewer\1.0\ahv.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\version.html Infected: Worm.Win32.Mefir.p skipped C:\Program Files\AOL\Installers\ASP 2.0\postproc.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\AOL 9.0\AFLookup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\AOL Deskbar\UNWISE.EXE Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Adobe\Help\en_US\Adobe Reader\8.0\version.html Infected: Worm.Win32.Mefir.p skipped C:\Program Files\Common Files\AOL\1152415670\EE\services\antiSpyware\ver2_4_6_1\resources\en-US\dat\PPClean.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\1152415670\EE\services\browserapp\ver1_5001_7_1\resources\en-US\aexplore.scr Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\ACS\InsHlp2k64.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\CCU\anotify.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\CCU\resetCCU.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\uninstaller.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AOL\WinsockFix\en-US\WinsockFix.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\coach\aolcinst.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\flash\FlashAX.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\rp\realpl8.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\rp\real_upd.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\rp\rp9codec.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolback\Comps\vwpt\VPPrePop.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AolCoach\en_en\ab3.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AolCoach\en_en\AolCInUn.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AolCoach\en_en\player\tranplug.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AolCoach\en_en\SetSPath.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\AolCoach\en_en\upregcond.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\aolshare\aolreset.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_06.b05\launcher.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_06.b05\zipper.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_09.b03\launcher.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_09.b03\zipper.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_10.b03\launcher.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_10.b03\zipper.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Kodak\kodak_dr\inst_act.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Kodak\kodak_dr\KodakCCS.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Motive\InstallHelper.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Nullsoft\ActiveX\2.6\ProxyConfig.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Real\Update\rnuninst.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Real\Update\upgrdhlp.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\ScanSoft Shared\vizprint.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Seagate\CDRecord\cdrecord2.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Seagate\CDRecord\growisofs.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Seagate\CDRecord\readcd.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Common Files\Verizon Online\AppMgr\vzOpenUIServer.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{25EF00BC-F17B-11D6-88EA-000476CD2443}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{25EF00C5-F17B-11D6-88EA-000476CD2443}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{25EF00C6-F17B-11D6-88EA-000476CD2443}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{25EF00D1-F17B-11D6-88EA-000476CD2443}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{25EF03DB-F17B-11D6-88EA-000476CD2443}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\InstallShield Installation Information\{74C8BF56-6618-49AA-98BA-862223900CBF}\Setup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\iedw.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Internet Explorer\iexplore.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Java\jre1.5.0_06\bin\java.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Java\jre1.5.0_06\bin\javacpl.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Java\jre1.5.0_06\bin\javaw.exe Infected: Virus.Win32.Virut.av skipped C:\Program Files\Java\jre1.5.0_06\bin\javaws.exe Infected: Virus.Win32.Virut.av skipped

Hi As I suspected, you have a Virut infection, which is a bad one. Virut infects the .exe files on the computer including the important Windows files. Normally the only way to clear this is by formatting your hard drive and reinstalling Windows. But I have been informed that F-Secures trial version has managed to clear this up once. It may depend on which files are infected. We can give that a go, but it may be best to have the Windows CD at hand in case you need to reinstall or repair the operating system. By the way, this infection is commonly picked up through websites where you download cracked and pirated software, and from what Ive seen of the KAV report, you have been doing just that. On the Internet, you really dont get something for nothing. Once you are up and running, I would strongly advise against visiting those sites, and instead look for freeware versions of the software you need. Let me know if you are ready to go.

Ready ! and a Great Big Thank You for your Expertise! I have my Windows CD ready just in case, and is anything salvagable in case I have to reinstall? like my photo's on kodak software, I have an external hard drive I can transfer them too, unless it will transfer a virus as well? please advise and Let's proceed! Renee6

Hi

You can transfer photos, music, just nothing that ends in .exe, which is an executable file. (what runs a program).

Try the F-Secure Anti-Virus evaluation. Click Here

Remember to uninstall your current anti-virus before installing F-Secure.

Run a full system scan.

Then run the Kaspersky Online Scan again. Use these instructions to scan the whole computer this time.

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then start to download the latest definition files.
• Once the scanner is installed and the definitions downloaded, click Next.
• Now click on Scan Settings
• In the scan settings make sure that the following are selected:
  • Scan using the following Anti-Virus database:
    
    + Extended(If available otherwise Standard)
  • Scan Options:
    
    + Scan Archives
    + Scan Mail Bases
• Click OK
• Now under select a target to scan select My Computer
• The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
• Now click on the Save as Text button
• Save the file to your desktop.
• Copy and paste that information in your next post.

With the exception of Internet Explorer, which is needed for the Kaspersky Scan, keep ALL programs closed until the scan is complete.


If you cannot boot the computer after running F-Secure, or have other problems and need to reinstall Windows, let me know you know how to first.

Will Do and Wish Me Luck! quick question in regards to reinstalling windows if I have too, do I need to reformat hard drive first ? or will it just reinstall over existing operating system? Renee6

Oh My! It just dawned on me, I am running two pc's on a network, if one is infected as it obviously is, does that mean the other one is as well? Renee6

Hi

I cant say for sure, but it could be possible. Run the first Kaspersky instruction, to scan the Windows folder on the other pc, and post the log.

Or if you see signs of Virut during scanning stop and let me know.

Hi scotty. ran the new kaspersky scan and 88 infected objects and 8 virus'es found I am trying to copy and paste now, but having a tough time. Renee6

It is telling me I don't have persmission to access file? "Windows cannot access the specified device, path or file. You may not have the appropiate permission to access the item" ? Saved the file to desktop like instructed? please advise. Renee

Still can't post the kaspersky report, only took 2.hours and 22 minutes to complete not hours, so thought that was worth mentioning.

Scotty, just for clarification, I am still working on my main pc, I inquired about the other on a network, I will worry about that one, after I straitghten this one out first, so I ran a kaspersky scan and saved it to my desktop but I am unable to open it or paste and copy it to show you?