Posted 19 September 2010 - 10:12 PM
Hello all. Yesterday, Avira Personal edition found the following program/virus/thing while I was opening Windows LIVE messenger:
They were found here:
'C:\Users\Username\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4EFHK6W4\pid=Messenger_IMSCB2_234x60_MMN.htm.
'C:\Users\Username\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\553S9XHB\pid=Messenger_IMSCB2_234x60_MMN.htm.
Avira popped up 4 times with this instantly as I opened the program. Live messenger was minimized but running in the system tray.
I moved the infected files to the quarantine. I scanned my PC with Avira in safe mode, as well as Spybot and Malwarebytes (only Windows and Users folder with Mbam). It came out clean. I then ran crap cleaner with its registry cleaner. I figured it was done.
Today, I was using live messenger. It worked fine, until again, I got the same same thing. Aviria popped up. Exact same location. It popped up 4 times (just like last time). I moved them to the quarantine once again.
So I am wondering if this is a false alarm for Avira? Or if not, how can I remove this virus?
Did some of the ads in Windows live messenger get hijacked? I use this program daily (a leave it running all day), so I would like to remove the virus if there is one.
I am running the Eset online scanner right this minute to see if it finds anything.
I am running Vista 64bit SP2.
What shall I do next? Any help would be appreciated.