Hello Dianne,

I suspect you may have the Mitglieder.FK (or one of the many aliases)
Trojan. The symptoms you described fit this Trojan almost to a "T". For a
detailed list of some of the changes it makes on your computer, check this
link:

F-Prot Antivirus Virus Information - W32/Mitglieder.FK:
http://www.f-prot.com/virusinfo/descriptions/mitglieder_fk.html

This would explain why AVG and other processes are not working or responding
properly. I suggest you attempt the following: First, as Joseph suggested,
go to Control Panel \ System \ System Restore tab, and turn off System
Restore on all drives. Next, return to Trend Micro-House Call as before and
have it delete everything it finds. Then go to PC PitStop and run their free
online scan. They use Panda which updates each time you use it. Panda is
very good and is rated above Norton and McAfee in some reviews I've read.
Here is the link to PC PitStop:

PC PitStop (you may want to run other tests there later)
http://www.pcpitstop.com/antivirus/default.asp

Do not restart the computer yet. Now attempt to install AVG or avast!. If
successful, update and run a complete scan. If you did not choose to install
TeaTimer when you installed SpyBot, reinstall SpyBot and include TeaTimer.
TeaTimer provides additional protection for system files. I recommend you
also install SpywareBlaster. It works in the background and prevents spyware
from infecting your computer in the first place. All you need to do with it
is keep it updated.

SpywareBlaster 3.4
http://www.javacoolsoftware.com/spywareblaster.html

Restart the computer. If everything appears to be normal, attempt to run
another complete virus scan. If successful, check the other settings, etc.,
you mentioned and reset if necessary.

Keep us abreast of the situation. Sometimes the simple and best solution to
insure you have a clean computer is, as Joseph mentioned, to start fresh
with a clean install of Windows. It's situations like yours that make an
image backup of you system so valuable. You can restore the system to as it
was at the time you made the image in a matter of minutes. Good luck!

Sven Swanson, Sr.

----- Original Message -----
From: "Dianne" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Thursday, November 03, 2005 1:43 PM
Subject: [PCBUILD] Mess that Virus created?

Hi Moderator,
Ok, this is going to be a long one, I will log what has happened from
beginning to end.
1.I received a WinZip file, I had been expecting one so I opened it, it
failed to open twice.  Then things started happeing this was probably a
virus.
2.  I had been running AVG free and it was completely updated daily.
3.  Then my AVG wouldnt work, I was told it might be corrupted, uninstall
and re-install, so I did.
4.  I got "Installation failed: "error action failed for file avgcc.exe,
creating file.... Bad File Descriptor"
5.  Keep receiving message that "windows explorer has encountered a problem
and must shut down" - Wthe Windows Explorer wasnt open at the time.
5A.  I installed Avast!, hoping to get some interim protection, it
installed, but then refused to work, telling me there was an "RPC error".
6.  On your advice, I downloaded and used: CW Shredder, Trend Micro
Anti-Spyware, Ad-Aware (which I use anyway) and SpyBot.
7.  When I used Anti-Spyware 3.0 (Trend Micro), after the entire scan, I
select all and delete the spyware/viruses/trojans, in the middle of the
delete process it tells me "Anti-Spyware Main Module has encountered a
problem and needes to close".  I tried again and the same message occured at
the same  time.
8.  I then downloaded and used Trend Micro-House Call.  It took 1 hour to go
through all the files on the computer and told me it found "25 infections"
(my heart turned upside down).
9. I continued the program and had them all deleted, it showed mainly
Troj_Bagel.AB and Java/ByTever.B as the viruses.  Why didnt AVG pick them up
in the first place?
10.  I shut down, rebooted and then attempted a clean install of AVG, only
to get the the same point in the installation and be told "Installation
Failed, Bad File Descriptor".
11.  When going to the Security Centre Icon in Control Panel, to make sure
the Windows Firewall is working, I get "Windows Firewall settings cannot be
displayed because the associated service is not running. Do you want to
start the Windows Firewall/Internet Connection Sharing (ICS) service?"  When
I say yes, all is well until I reboot the computer, and we start all over
again.
12.  I have been to the MY COMPUTER-MANAGE-SERVICES location, and turned on
everything: ICS, RPC, etc.  But when I reboot it goes back to zero.
Any ideas.
Dianne

              The NOSPIN Group is now offering Free PC Tech
                     support at our newest website:
                          http://freepctech.com