AVG version 7

Hi Don1,
Is it giving you a location of the infected files ?

Yes it is, what puzzles me is that with version 6 I just had to click on "move to virus vault" and it was done this version seems to be without that facility

Hi again Don1,
Try running a few online virus scans

Go Here BitDefender Scan Online
Run a scan with BitDefender , Be sure and Check Auto Clean. Make a note of anything it can't remove

Next
Go here Trend Micro - Free online virus Scan
Be sure and check Auto Clean before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location so you can delete it yourself.


Click Here and run RAV online scan, Copy and paste back the log into this thread when it has finished,

OK don77,

Ran bitdefender got this:


C:\Program Files\Windows SyncroAd\CComm.dll: infected with Adware.SyncroAD
C:\Program Files\Windows SyncroAd\SyncroAd.exe: infected with Adware.SyncroAD
C:\Program Files\Windows SyncroAd\WinSync.exe: infected with Adware.SyncroAD
C:\WINNT\180ax.exe: infected with Adware.Ncase.D
C:\WINNT\180axhook.dll: infected with Adware.1088
C:\WINNT\Downloaded Program Files\SyncroAdX.dll: infected with Adware.Wupd
C:\WINNT\klcv.exe: infected with Adware.180Solutions.5.11

Don1,

Reboot to safe mode ( By tapping the F8 key on start up) Make sure you can view all Hidden Files/Folders search for and delete the above files highlighted in BOLD

C:\Program Files\Windows SyncroAd\SyncroAd.exe <Delete Folder
C:\Program Files\Windows SyncroAd\WinSync.exe <Delete Folder

C:\WINNT\180ax.exe
C:\WINNT\180axhook.dll
C:\WINNT\Downloaded Program Files\SyncroAdX.dll <Delete Folder

C:\WINNT\klcv.exe

Restart your computer,
Download Ad-Aware SE
Use the: "Check for Updates Now" option and download the latest reference files
Use the Start button, and on the next window, select: Perform Full System Scan
Press Next, and let Ad-aware scan the hard drive
When finished, right-click the window with the entries, choose: Select All from the menu, and click Next
Once AdAware has removed the entries, close the program
Restart the computer

Next,
Please go Here and unzip the newest version of HJT into a new dedicated folder,
Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it hjt. Unzip HijackThis into this folder. Launch Hijack This, then press Scan, and press Save Log
This will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.
Most things are harmless and needed so don't make any changes.
post a log here please.

Lets see if anything else is on your system,

I cant do what you ask don at the moment because I am not the administrator of this machine, however I have cleared the puter of virii exept for trojan horse dialler 8BA

I'm pretty happy up to now

Could you run the RAV scan and paste back the log from it please,

Here it is don,

Scan started at 23/12/2004 02:05:18

Scanning memory...
C:\WINNT\Downloaded Program Files\SyncroAdX.dll - Tool:Win32/Winad -> Infected

Scanned
============================
Objects: 24478
Directories: 2207
Archives: 416
Size(Kb): -1547611
Infected files: 1

Found
============================
Viruses found: 1
Suspicious files: 0
Disinfected files: 0
Mail files: 218

Hmmm
Reboot to safe mode again, search for and delete the following

C:\WINNT\Downloaded Program Files\SyncroAdX.dll again delete the folder associated with it if found,

I'd be happy to follow your instructions don but I have no idea of safe mode or what it is or what to do in it.

Reboot to safe mode ( By tapping the F8 key on start up)

Don I thank you for your time and effort but if AVG is this difficult to operate it's a waste of space, I'm going to dump it and buy Norton or McAffee.

Thank you ten times over for your patience.

and seasons greetings to you and your family