Do I have a virus what should i do?

Question

I was looking for a rar archiver and i downloaded a program that was soposidly winrar but then i ran it and it changed my background to somthing about a virus and now my browser keeps getting redirected to spam sites and my computer WONT let me connect to certian sites like trendmicro.com or anything. I got AVG free and Adaware. I'm currently scanning in safemode with AVG free and so far it hasnt found any viruses, i think, and the scanner said it didnt scan the files in this path C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys i went there and there are 2 locked files, 38482c0b_24adf822-76f7-4481-b30b-ff1b40f... and 8d05109e_24adf822-76f7-4481-b30b-ff1b40f... there are a few others that arent locked. do i need those files? what should i do?! HELP!!!

Answer 1

Firstly, antivirus programs will NOT remove these as they are malicious codecs, although they may find reference to them and remove it but upon rebooting it's back again.

Therefore you need to use a 'layered' approach to removing this parasite.

RogueRemover:

http://www.download.com/RogueRemover/300...

Download, install, update, scan and follow on screen prompts.

Malwarebytes Anti-Malware:

http://www.download.com/Malwarebytes-Ant...

Download, install, update and select Full Scan.

Remove all infections that it finds after scan.

Spybot S&D:

http://www.safer-networking.org/en/downl...

Download, install, update and Immunize, then click 'Check for problems' then when complete select all and then 'Fix Checked'

Spyware Doctor Free Basic Edition - Realtime monitoring:

http://pack.google.com/intl/en/pack_inst...

Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.

SUPERAntiSpyware Free Edition:

http://www.download.com/SUPERAntiSpyware...

Download, install, check for updates, then select Scan your Computer, select your drive and select Perform Complete Scan

VundoFix:

http://www.symantec.com/content/en/us/gl...

Disconnect your computer from the internet

Run vundo

Restart your computer

Run the tool again to ensure no traces are left.

If there are the reboot into Safe Mode and run FixVundo again.

If your desktop has changed or icons are missing also use:

Wallpaper Hijacker Removal Tool:

http://www.majorgeeks.com/Wallpaper_Hija...

Note: You should hit all "Repair" buttons even though it may not say "Found!" This will fix a wallpaper hijack everytime if all repair buttons are pressed.

SmitFraud Removal

This tool will remove Desktop hijacking malware. Firstly, download the removal tool from here:

http://downloads.securitycadets.com/Smit...

How to use:

http://cotojo.wordpress.com/2007/08/24

Answer 2

download this program

http://malwarebytes.com

and this one too and your problem should be sloved dont use avg any more i had it once

http://superantispyware.com

get this one instead of avg

avira or avast only one

http://avira.com

http://avast.com

Answer 3

if your the administrator of the computer and it says that these files are locked, you should delete them. if your not the administrator, ask them if they can open those files and if they can with no problem, there's nothing to worry about