virus on pc please help

i am running vista home premium. i run avg virus protection and it has picked up the following..

win32. Trojan. Agent
cat: malware
Object type: reg value

it shows up with 2 of these/

Win32 Trojan Agent
cat: maleware
object type : file
location-c:\windows\system32\mysexworld.ico

it shows up 1 of these

win32 trojan agent
cat: maleware
Object type: reg key

it shows up as 1 of these


now my daughter has never been on any sex web pages. while running one of the programs u ask to do for posting a thread it did come up delted the mysex world.

The other thing since these have appeared on my daughter pc evertime a web page or u download somthing the computer makes a very loud whurring noise.

please find enclose all logs u have asked for

many thanx for you help
shell

 

Hi Shell38!
Welcome to Major Geeks!

Thanks for posting your logs. One of us will be getting back to you after awhile. Thanks for being patient.

abri

 

Thanx everso much for getting bk to me an i wait for ur reply.

Doing a scan looks like the pc has no longer got the virus but i wld b more happy once the logs have been checked before i do re start points.

also the computer is still making this funny noise and its less than 6 months old, but think that must b something to do with the fan or somthing.

many thanx
shell

 

Hi shell!
Please run AVG Antispyware again and have it fix everything it finds.
abri

 

Hi shell38!

Nothing major left, but it would be good to do the following:

1) Go to add/remove programs and uninstall the below:

- Java(TM) 6 Update 2
- Java(TM) SE Runtime Environment 6 Update 1
- Messenger Plus! Live & Sponsor (CiD)

2) Do you know what the following files are?

3) Now we need to stop a service:

• Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
• On the page that opens, scroll down to Symantec Lic NetConnect service
• then right click the entry, select Properties and press Stop Service.
• When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
• Click OK until you get back to Windows.

• Next, run HJT (it will now be called analyse.exe and you will find it inside the MGTools folder of your root drive), but instead of scanning, click on the None of the above, just start the program button at the bottom of the choices.
• At the lower right, click on the Config button
• Then click the Misc tools button
• Select Delete an NT Service
• Copy/paste CLTNetCnServiceinto the box that opens, and press OK
• If you receive any error messages just ignore them and continue.
• Now exit HJT but do not reboot when it tells you it needs to. We will do that further down after running HJT again to fix some other items.

Now run HJT/analyse.exe (select Do a system scan only) and select the following lines but DO NOT CLICK FIXuntil you exit all browser sessions including the one you are reading in right now:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

After you click fix, just close hijackthis.


Tell me how things are working now.
abri