Greetings, I have been so mindless and click a link from a friend on MSN Messenger this Saturday. The name of it was PIC006.JPG-live.messenger.com. Not before it was too late, did I realise it was a virus.
I may have been a bad girl in trying to remove it on my own, instead of coming to you directly. I will try to explain the steps I have taken myself here.
First I ran scans with AVG Free, Spybot - S&D and ClamWin. Neither found anything. Then I uninstalled MSN Messenger and everything (or at least I think everthing) connected to it. I then ran all 3 programs again with no result. Then I was sad and it was late, so I went to bed leaving the PC on. Then when I returned to the PC sunday morning it appeared that TeaTimer (it is TeaTimer that little thing by the clock in the bottom right corner that asks if I want to accept or deny changes stuff wants to make to the registry, right?) had found it and asked me if I wanted to accept or deny it. I denied. (I probably should mention that when I clicked the link saturday and before I realised it was a virus it had popped up and I had accepted *DOH*) Then I opened the AVG Free Virus Vault and it seemed it was in there too. I then removed it along with everything else in there. It called it a "back up" so I'm not sure if it removed the original or just a back up. Then I deleted that version of AVG Free and got a newer one, scanned again and it found... *surpriseee* Nothing. Then I thought my day was made... But low and behold, not 5 mins passed and TeaTimer again popped up asking me if I wanted to accept or deny that file to change in the registry. Then I went searching forums, and found a few with the same name of virus as "mine". I then did a foolish thing *sowwy* and did what one of them had adviced the user to do. I downloaded MsnCleaner and rebooted to safe mode and ran it. It found a file (which I can't remember the name off except it was somethingWINDOWSsomething) and I told it to remove that file. I rebooted to normal mode and again TeaTimer popped up asking me if I wanted to allow or deny. I denied again. And here is where my stupidity ends (Or so I'd like to hope) and I am writing to you. I have followed all the steps in your "Before you post" and "Before you post a log", so I have both a Kaspersky log and a HijackThis log for you.
I haven't installed MSN Messenger again and I've not logged in to anything requiring a password including my WoW *miiiiiiiss iiiiit * Even here I've used a username and a password nowhere near what I normally use. I'm so scared the virus contains a keylogger.
I am looking very much forward to hearing from you and I promise, cross my heart, only to do what you tell me to do from now on.
*Bows gracefully*