A few days ago, my computer started acting up. We have 4 accounts on our families computer, mine is the only one having problems so far. My sister downloaded FrostWire last year, I think. I uninstalled it and I went through and deleted all the files I could find. When I logged on the Calculator was pulled up, I closed out of it and it would come back. After about 10 minutes they started multiplying every time I tried closing them. Then random ads would pop up on their own like QuestionSpider, Local.com, 2oosk.com, Adbrite, Plus.Google.com, IntornetDotOrg, ********e, and Depleted.org. Internet Explorer closes on its own, but Google Chrome is fine. The ads stopped after I downloaded Microsoft Security Essentials and ran it a couple of times. The calculator is still popping up though. I keep scanning the computer with Kaspersky AV 2012 and MSC but neither of them are finding anything else so far besides these that MSC removed so far:
Trojan:Win32/AgentBypass.gen!K
Items: file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\Reid.dll
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\Sherlock.dll
Worm:Win32/Ainslot.A
Items: file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\Microsoft\Windows\Haily.scr
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\037dee56.exe
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\045e2236.exe
Worm:Win32/Gamarue.I
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\041e981f.exe
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\7033.exe
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\7180.exe
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Local\Temp\9261.exe
Exploit:Java/CVE-2010-0840.DY
file:C:\Users\Patrick\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\2b8 54b99-1f1324c6
Exploit:Java/CVE-2010-0840.GZ
file:C:\Users\Dad\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\20453c1 6-73469f4f
Exploit:Java/CVE-2010-0840.DZ
file:C:\Users\Patrick\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\2b8 54b99-1f1324c6
Exploit:Java/CVE-2010-0840.DW
file:C:\Users\Patrick\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\2b8 54b99-1f1324c6
Exploit:Java/CVE-2010-0840.DB
file:C:\Users\Patrick\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\2b8 54b99-1f1324c6
Exploit:Java/CVE-2011-3544.gen!A
Items: file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\15038ef4-3e78215a
Adware:Win32/OpenCandy
folder:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\OpenCandy\
folder:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\OpenCandy\D6097FE4FD074ADF9F0D70E68093443C\
folder:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\OpenCandy_D6097FE4FD074ADF9F0D70E68093443C\
folder:C:\users\chelsey mae\AppData\Roaming\OpenCandy\
file:C:\Users\Chelsey.Mae.RobertMCoyle-PC\AppData\Roaming\OpenCandy\D6097FE4FD074ADF9F0D70E68093443C\driverscanner win7.exe
TrojanClicker:ASX/Wimad.gen!H
Items: containerfile:C:\Users\Chelsey.Mae.RobertMCoyle-PC\Frostwire\Torrent Data\iTunes Store Top 10 Songs (USA 2012)\We Are Young (feat. Janelle Monae) - Fun.mp3
TrojanDownloader:ASX/Wimad.DT
Items: containerfile:C:\Users\Chelsey Mae.RobertMCoyle-PC\Frostwire\Torrent Data\Fun - We Are Young (ft. Janelle Monae)\Fun - We Are Young (ft.Janelle Monae).mp3
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Pentium® Dual-Core CPU E5400 @ 2.70GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 5885 Mb
Graphics Card: Intel® G45/G43 Express Chipset, -1281 Mb
Hard Drives: C: Total - 381551 MB, Free - 268835 MB; D: Total - 564118 MB, Free - 563964 MB;
Motherboard: ASUSTeK Computer INC., CM5571
Antivirus: Microsoft Security Essentials, Updated and Enabled
I have the logs from DDS, HiJack This, and Malware but wasn't sure if I should post them


Moderator
CNET Staff
Samsung Staff
Dell Staff