Got these reappearing suspicous files...

Hello.

As you can see in this picture, this thing keeps popping up. I have no idea why. Should I be worried?

http://i57.tinypic.com/29lkd9f.png

Thanks in advance!

Hi,

It looks as if you might be infected. I don’t know why Avast! is detecting stuff in a Steam Folder. Could you find and upload vtex.exe to wikisend.com and send me the link so I can have a look?

If you’d like to check fro malware/viruses go here: http://forum.avast.com/index.php?topic=53253.0

Attach MBAM/OTL/aswMBR

aswMBR is for Windows 7 Only

Also, you’re using an outdated version of Avast!

My bad, I forgot to tell that the steam one is a false alarm.

Also, I have run full scans before with avast and Spybot - Search and destroy. They gave no results.

Thanks for pointing out that Im not updated. Avast told me i was “up-to-date”, but I missed the “requier restart” :stuck_out_tongue:

And, immiedtly when I came back from restart, another one of these files got blocked…

I shall try the methond in your link. Should I do another scan, now that my antivirus is updated?

Go to my link. It will help the removers find where the issue lies.

You can try another scan now that Avast! is Updated given it’s marked as [susp]. However, if it’s being blocked on start-up, best guess is it’s malware running on Boot up

I dont know if it has anything to do with anything, but this came up. (Havent done the the stuff in your link yet, still downloading it)

http://i58.tinypic.com/2dsn0vm.png

Sorry, its in Norwegian, but it transaltes to:

Information about backcalling of the securitycertificat for this area is not avelible. Do you want to continue? [Yes] [No] [View certificate]

(Right window)

This certificat is for this purpose:

Garuanties identety to an exsternal machine.

I answered no. If you think this is of any importance, I can try to make a better translation.

It shouldn’t matter…

Heres the files.

Hi, I’ve asked someone to come help you.

Thanks for your help!

To whoevers going to help me, my internet will cut off at midnight (in about one hour).

If you need my full precence in over an hour, I have no choise but to come back tomorrow.

Hi time is not a problem, whenever you are ready :slight_smile:

There is a possibility that Avast is detecting a windows defender update. What this will do is empty the temp files. Once done could you run an Avast quickscan and let me know if they re-appear

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-96304197-1167153979-3875734180-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Here’s the file. The quickscan gave no results.

By “let me know if they re-appear” I guess you mean the messages that another file has been blocked?

These messasges come at random times. As you can see in the log, they dont come every day, even tough I use the computer everyday. Sometimes it comes when I start the PC, sometimes it comes many hours after.

So, shall I just wait and post it here, when another blocked file comes?

The block is probably from your browser telling you that the websites security certificate is either out of date or invalid

Soo, nothing to fear? Sorry, I didnt understand your last post. A “Its okay” or something would be nice.

The warning came again, BTW

http://i62.tinypic.com/k00zfa.png

The security alert is OK :slight_smile:

Looks like it is blocking defender updates again for some reason. Temporarily disable the shield whilst you download windows updates

Yay! Thanks for your help, essexboy and Michael!

Have a vrtual cookie

http://upload.wikimedia.org/wikipedia/commons/1/16/Choc-Chip-Cookie.jpg