Hello! Recently I has faced a problem: windows asks activation during active work. It is very cheerful, but is sad. : )
My system: Windows Vista. I use an antivirus Avast. Problem essence: a certain file each time with a new name and weighing 18-20kb registers in C:\Users\MyUserName\AppData\Roaming. It is started at system start. It is activated in an operating time, to me and other users harms. The antivirus Avast for a virus does not consider… With a problem I consult deleting a file, but it again appears… help… Excuse for bad English and errors and for all the rest…
Make something with it, protect our computers! In advance thanks!
As again there will be this file, I will lay out it in a network and here there will be a reference… I Hope has written where it is necessary…
Are you saying a virus unknown to Avast deleted your activation key ? You could post a HijackThis log.Run the program, choose 'scan and save a log file ’ copy/paste the txt log.
Also you could try MalwareBytes Antimalware and SuperAntiSpyware, download,install and update, run and copy/paste the txt logs
http://filehippo.com/download_hijackthis/
http://filehippo.com/download_malwarebytes_anti_malware/
http://filehippo.com/download_superantispyware/
Is your copy of Vista genuine ?
Please also post a virus scan of the file www.virustotal.com
Mr.Agent
I hope you didn’t buy a pirated Windows Vista installation CD or downloaded a pirated Vista installer. Have you previously downloaded any keygens or cracks?
Look at this article.
No, I did not load.
My system: Windows Vista Ultimate.
Thanks, Mr.Agent, I have followed the link is have helped to define that it is a virus! Avast it does not catch, it is very a pity… When updating is possible?
As the virus has got into system to me it is not known - probably through a certain vulnerability in IE or Opera…
Here result (I have placed a harmful file in archive *.zip and I will throw to in you service if it is necessary): 8/41 (19.52%)
Файл dlptr.zip получен 2009.06.25 04:59:06 (UTC)
http://www.virustotal.com/ru/analisis/eb08b18a519a817e689c7f9bcf541644b17933d33527bcd56c27ed684faa3639-1245905946
The virus does not delete my key of activation windows, he demands to send SMS on unknown number is a swindle! When it begins work works of nothing except a combination of three sacred keys, but also they do not help me.
Try the programs suggested earlier, if you can
You could try DrWeb cureit tool in safe mode http://www.freedrweb.com/cureit/
Also Kaspersky recognises this threat you could try the rescue cd http://www.raymond.cc/blog/archives/2008/06/16/kaspersky-offers-free-rescue-disk-to-clean-virus-without-booting-in-windows/
How to burn ISO as an image
http://www.raymond.cc/blog/archives/2006/09/16/how-to-burn-images-on-a-cddvd/
Problem has solved. I as would like for the user that Avast has added in the virus bases it is a miracle… To Use simultaneously several antiviruses inconveniently, and it is necessary…
Whether so there will be an updating of the bases, containing the information on this virus?
HOW did you solve your problem ?
I have unloaded at the beginning of work of an operating system this process means of the dispatcher. In the same place I managed to find found a virus-file. After an unloading, I have removed this file. Has established the free full version of antivirus DrWeb which has found out five more similar files with the different names, two of them were in a time folder, the others in tempinternet IE. All these files bore silly names and occupied exactly 23552 bytes. At forums I subtracted that the virus damages the register. Register has been restored by councils of other users to initial values. It has definitively solved a problem and a virus more than does not show.
Whether so there will be updating Avast on such case and where me to write and send a file with a virus that it have added in database Avast!???
Im happy you solved your problem 
You can send files to virus@avast.com