First bootscan and now windows not genuine

Viruses and worms
1

I have just settled on using Avast Pro Antivirus a month ago.Version is 5.1.864.This is also a trial at the moment until 16th January.
I realised last night that i could do a bootscan and so i let it do this overnight.
Yesterday i ran the quick scan and it found:
file name C:\Program Files\Unlocker\eBay_shortcuts_1016.exe]>$INSTDIR\eBayShortcuts.exe (i dont know what this one is i know i didnt download this knowingly) severity High status Threat: Win32:Yabector-B [Adw]
and also
C:\Users\USERNAME\Downloads\flashPlugin.45149.exe (my fault i thought this was a genuine flash plugin.)
Severity:High Status: Threat:Win32:Dropper-Gen[Drp]
I allowed both to move to chest.Trouble was the ebay one couldnt be moved. It had in the result Error:Access is denied (5)
So i ran a full system scan next and only this ebay threat was still shown in the log results - and again same error.
So then i found i could do a bootscan and i left it overnight to run.
this threat was shown again and also 3 other medium threats in sun\java\deployment\cache…c.class and 2 were vload.class (not the full path or else i would be typing all night) The threats were all Java:Jade-A[Heur].Unfortunately i pressed the wrong thing and they deleted instead of move to chest.
Upon further doing another quick scan nothing was found this time.

I haven’t turned the PC off as yet so i don’t know if i will have a problem restarting.

But what i have noticed now is sitting in the bottom right hand corner of my desktop
Windows Vista ™
Build 6002
This copy of Windows is not genuine.

Can i just ignore this or?

I have a genuine Windows Vista Home Premium with service pack 2 and i have the Disk.The sticker is also on the tower.Bought from the Office Supplies/Computer shop here where i live.
Going to start/control panel/system this tells me the windows activation is activated along with the product ID. number.
A 32 bit system with 1TB HDD and 2gig of ram.AMD phenom 8450 triple core processor 2.10 GHz as well.
I use Superantispyware in the background as well as winpatrol plus.
Secunia Psi and Comodo free firewall with the anti-virus not on.
Windows should be up do date along with all programs (I have autoupdate on).I do not use windows defender nor windows firewall.My pc is 18 months old. and is only used here at home (desktop) and I have not come across this not genuine before.My husband and 2 teens also use it tho the kids are away at the moment due to school holidays.

I do have a problem at the moment and my pc is going back to the repair fellow on the 10th. But that is def a separate issue that’s been happening for several weeks now.
The reason i started scanning yesterday was due to the fact i downloaded that flashplugin thing and then realised it was the cause of suddenly i was unable to open any folder without windows explorer shutting it down on me then restarting explorer itself.

That is now fine though…after the bootscan.

Sorry for such a long post - I had to give details.

Thanks for any advice…

2

just reboot and this should be automatically fixed. If not, go there:
http://www.microsoft.com/genuine/validate/validatenow.aspx?displaylang=en

(you might be prompted to download an activation check update/repair utility)

…but first, for your malware issue, go there:
http://www.malwarebytes.org/mbam.php

download the free version, install it, update it and run a quick scan.

ps: Windows might refuse to update as long as your computer is infected (new MS policy)

edit: unlocker isn’t 100% safe. I’ve used it already, but I dismissed the ebay stuff :wink:

3

Thank you Logos- I rebooted and it has gone.

I think i might have panicked reading too many posts on this issue - i was worried i wouldn’t be able to reboot.

I also forgot to mention i did scan with Malwarebytes Anti-Malware - and it did not pick up anything in its scan. Still a great program to use - just some of these things are too sneaky sometimes.

I may remove unlocker - i used it a few times on the old xp i had but out of habit i downloaded this from the start of my vista and only used it once.

thanks again logo and have a great day 8) - tis warm in oz at the mo!