[evilfantasy]

AVG
Please open the AVG Control Center program -> double-click on the "AVG Resident Shield" component (looks like this: ) -> deselect the "Turn on AVG Resident Shield" checkmark and save the setting.
When you need to enable the AVG Resident Shield, ( I’ll let you know when) just open the AVG Control Center program -> double-click on the "AVG Resident Shield" component -> select the "Turn on AVG Resident Shield" checkmark and save the setting.

[slime]

Hi,
I've unchecked the 'Resident Shield Active' box & saved changes but, it says that I am still fuly protected & the Resident Shield is still active.
I am on version 8.0.175, is that correct ?
Regards,

Slime.

[evilfantasy]

Can you right click the shield in the system tray and exit out of it now?

[slime]

YES

Slime

[evilfantasy]

Is the scanner running now? If not then we will try another one.

[slime]

Hi evilfantasy,
sorry about the delay.
Tried to run Kaspersky with AVG turned off - no good.
Tried again with Windows Firewall also off - no good.
On both occasions the scan stopped at 7%.
I think it's going to have to be another scanner.
Look forward to your suggestions,
many thanks,

Slime.

[slime]

Hi again,
I'm sorry but I seem to have changed the order of the replies, don't know how !!

Slime.

[evilfantasy]

OK let's try another scanner.

Scan with Panda ActiveScan

• Once you are on the Panda site click the Scan your PC now button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Select the appropriate Yes or No to receiving marketing information
• Click the Free Online Scan button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Post the contents of the ActiveScan report in your next reply.

[slime]

Hi evilfantasy,
ActiveScan has finally finished, it took almost 4 hours, with the following log ;

;************************************************* ************************************************** ************************************************** ******************************
ANALYSIS: 2008-11-10 17:14:27
PROTECTIONS: 1
MALWARE: 8
SUSPECTS: 0
;************************************************* ************************************************** ************************************************** ******************************
PROTECTIONS
Description Version Active Updated
;================================================= ================================================== ================================================== ==============================
Windows Defender 1.1.4104.0 No Yes
;================================================= ================================================== ================================================== ==============================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;================================================= ================================================== ================================================== ==============================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@doubleclick[2].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@atdmt[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@atdmt[3].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@tribalfusion[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@tribalfusion[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@mediaplex[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@mediaplex[2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@apmebf[3].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@apmebf[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Mark\Cookies\mark@bs.serving-sys[2].txt
02891356 Trj/Spammer.ADX Virus/Trojan No 1 Yes No C:\Documents and Settings\Mark\Application Data\Thunderbird\Profiles\f3nfw7ew.default\Mail\Lo cal Folders\Outlook Express Mail.sbd\Deleted Items[photos.zip][photos.scr]
;================================================= ================================================== ================================================== ==============================
SUSPECTS
Sent Location i
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================
VULNERABILITIES
Id Severity Description i
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================

It is now asking me whether I want any 'Disinfectant Advice'.
It says I have 1 medium danger threat with free disinfection & 7 low danger threats with paid for disinfection.
Shall I just exit, or shall I go for 'Disinfection advice' ??

Gratefully as always,

Slime.

[evilfantasy]

It's just cookies except for this one file.

C:\Documents and Settings\Mark\Application Data\Thunderbird\Profiles\f3nfw7ew.default\Mail\Lo cal Folders\Outlook Express Mail.sbd\Deleted Items[photos.zip][photos.scr]

You need to empty your email trash and it will be gone.

How is everything now?