iLivid will not go away

Seems good now. I will check in again if anything strange arises, but thank you so much for guiding me through this.

--Mike

Good stuff.

I'd recommend a scan with ESET before we do the cleanup

ESET Online Scanner:
Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your Anti-Virus.

Disable Antivirus

• Open AVG 2012
• Select Overview from the left hand side menu.
• The screen you see should be similiar to this http://i.imgur.com/L09aM.png
• You want to ensure that Resident Shield is set to Disabled. If it is not, then please disable it.
  
  • Double click Resident Shield.
  • Untick the Resident Shield Checkbox.
  • Click the Save Changes button.

Vista/Windows 7 users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

• Please go here to run the scan.
  

  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• Scan for potentially unwanted applications
  
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology


• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
• Now click on:
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

Not sure if this is the right log file. It does not appear to be in the Eset folder, but I copied the virus report before closing. Looks like they got to The Ting Tings.

C:\Documents and Settings\All Users\Documents\My Music\Ting Tings\The Ting Tings - We Started Nothing (2008)\07-the_ting_tings-be_the_one.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan
F:\PC\My Music\Ting Tings\The Ting Tings - We Started Nothing (2008)\07-the_ting_tings-be_the_one.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan

Hi Mike,

A common infection method for Malware authors is to host audio/video files on P2P networks that require a special codec to play them. When the user attempts to play the file he/she is prompted to download the codec. Of course the codec turns out to be an infection of some sort. This is the very reason we discourage the use of P2P software. I suggest you completely delete the two Ting Tings folders below to be sure there are no other surprises contained in them.

• C:\Documents and Settings\All Users\Documents\My Music\Ting Tings
• F:\PC\My Music\Ting Tings\The Ting Tings - We Started Nothing (2008)

Security Check

• Please download Security Check by screen317 from one of the links below:
  
  • Link 1
  • Link 2
• Save it to your Desktop.
• Double click SecurityCheck.exe, then follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt
• Please post the contents of that document.

Hi -- Quick question if you're still there... the C: drive folder does not exist, as far as I can tell. Any thoughts?

Found it, but it was in "Shared Documents".

Security Check results:

Results of screen317's Security Check version 0.99.43
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
AVG Anti-Virus Free Edition 2012
Lavasoft Ad-Watch Live! Anti-Virus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
Malwarebytes Anti-Malware version 1.62.0.1300
Java(TM) 6 Update 32
Java version out of Date!
Adobe Flash Player 11.3.300.268
Adobe Reader X (10.1.3)
Mozilla Firefox (14.0.1)
Mozilla Thunderbird 13.0. Thunderbird out of Date!
````````Process Check: objlist.exe by Laurent````````
AVG avgwdsvc.exe
AVG avgtray.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 5%
````````````````````End of Log``````````````````````

Congratulations your PC is now feee from infection Follow the below steps to remove vulnerable programs and tighten your systems security.

Remove Out of date Programs

• The following programs installed on your PC are out of date and represent a significant risk of re-infection.
  

  Java(TM) 6 Update 32

• Click on start
• Then Run
• In the open text entry box please copy/paste appwiz.cpl Then click enter.
• Press the "Remove" or "Change/Remove"...button to uninstall the programs listed above (in red).
• Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.

Java Update
You can get the latest version of Java here http://www.java.com/en/download/index.jsp


Clear infected restore points with OTL
We need to run an OTL Fix

• Double click OTL.exe to start the program.
• Copy and Paste the following code into the textbox. Do not include the word Code
  

  
  
  :commands
  
  [CLEARALLRESTOREPOINTS]
  
  [REBOOT]
  
  

• Then click the Run Fix button at the top.
• Click .
• OTL may ask to reboot the machine. Please do so if asked.

Clean up with OTL

• Double click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CleanUp! button
• Say Yes to the prompt and then allow the program to reboot your computer.

Anti Virus
Here are some programs I would reccomend instead of AVG. Install one of these and then uninstall AVG

• avast! Free Anti-Virus - Anti-virus program for Windows. The home edition is freeware for noncommercial users.
• Microsoft Security Essentials - Free and provides real-time protection for your home PC.

Additional Security Tips.
Update your Antivirus programs and other programs regularly.
Secunia Personal Software Inspector - Copyright © Secunia. This app will monitor programs on your computer for known vulnerabilities. You can set it to auto-update for you, or just prompt you if an update is available. I highly recommend it.
F-secure Health Check - Copyright © F-Secure Corporation. F-Secure Health Check is a free application that tells you if your computer is protected and helps you fix possible security issues.

Visit Microsoft often
Keep on top of critical updates, as well as other updates for your computer.
How to configure and use Automatic Updates in Windows XP
Using Windows Update for Windows XP
Microsoft Update Home


Read, stay informed.
To help minimize the chances of becoming re-infected, please read.
Computer Security - a short guide to staying safer online


Please let me know that you completed the cleanup steps, and reviewed the rest of the post. Once I receive your reply, unless there are other malware questions or concerns, I will have this topic closed as resolved.

As your problems appear to have been resolved, this topic is now closed.
We are pleased we could help you resolve your computer's malware issues.

If you are satisfied with our assistance and wish to donate to help with the costs of this volunteer site,
please read: Donations For Malware Removal