Don't you love IE pop-ups? Haha, log here help appreciated.

[chryssi2001]

Hi eab03e,

• Double click OTMoveIt.exe to launch it.
• Copy/Paste the contents of the box below into the left hand pane of OTMoveIt.

D:\singles\01 Track 1, street.wma

• Click the Move It button.
• The list will be processed and the results will appear in the right hand pane.
• If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
• When finished click Exit to exit the program.
• A log C:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log will be created (where mmddyyyy_hhmmss are numbers giving date and time the log was created).
• Post the log back here please.

-------------------------------------------
Now follow the steps mentioned in my post here.

Run ATF cleaner, give special attention to use Firefox tab.
Re-run AVG-Antispyware in safe mode again. Please be sure you have all the settings as per my above post, especially the part:

Under How to act? - make sure that Quarantine is selected.
-------------------------------------------
Post back:
AVG Antispyware report.
OTMoveIt log.

[eab03e]

File/Folder D:\singles\01 Track 1, street.wma not found.

Created on 11/05/2007 13:23:58

[chryssi2001]

Hi eab03e,

We are not out of the woods yet. I can't be sure we've cleaned all the infections on your pc.

You missed doing the steps below in my previous post. I need you to follow those steps, and see a new report from AVG Anti-Spyware.
-------------------------------------------------
Now follow the steps mentioned in my post here.

Run ATF cleaner, give special attention to use Firefox tab.
Re-run AVG-Antispyware in safe mode again. Please be sure you have all the settings as per my above post, especially the part:

Under How to act? - make sure that Quarantine is selected.
-------------------------------------------------
You've told me you created singles folder in your D drive.
What kind of device is the D: drive?

There is an infected file in there which needs to be removed

[eab03e]

in the step where it says to "apply all actions" I can't find the button to do this?

[eab03e]

the d drive is just a storage drive. Mainly audio, video and pics....a lot of torrent files.

[chryssi2001]

Hi eab03e,

in the step where it says to "apply all actions" I can't find the button to do this?

Try to follow these steps in safe mode:

AVG Anti-Spyware - 2nd Part

Print out these instructions or save them into a notepad on your desktop, because you will not have internet access while in Safe Mode.

Go in Safe Mode by restarting your computer, then continually tapping F8 until a menu appears. Use your up arrow key to highlight Safe Mode, then hit enter.

• Click on Scanner on the toolbar.
• Click on Complete System Scan to start the scan process.
• Let the program scan your computer.
• When the scan has finished, follow the instructions below:
  
  • Make sure that Set all elements to: shows Quarantine
  • Important: Click on the Apply all Actions button (*** This  must  done before saving the report***)
  • When the program has finished, it will display the message All actions have been applied.
  • Then click the Save Scan Report button.
  • Click the Save Report as button.
  • Save the report to your Desktop.
• Right-click the AVG Tray Icon and select Exit. Confirm by clicking Yes.
• Reboot in normal mode and copy the report back to this topic.

You've already managed to create a report last time and post it back here, so you should do exactly as my instructions say in order to save the report.
This part was left behind last time you run the tool, and it's very important.

Make sure that Set all elements to: shows Quarantine so it didn't Quarantine all it's findings.

----------------------------------------------

the d drive is just a storage drive. Mainly audio, video and pics....a lot of torrent files.

Portable/external drive?

[chryssi2001]

Hi eab03e,

Are you still with me?

[Elrond]

This topic is now closed due to inactivity. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

If it has been 10 days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, this topic will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread in your new topic.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.