themadbomber

hi there my wife recently downloaded some videos and sure enough we are now infected, avast names it as Win32:Alureon-BY [Rtk], but can not keep it from reinstalling on the system

malaware bytes names the virus as trojan tdds and also seems unable to remove it

avg lists about 50+ infections all with the same name and loctaion
"C:\WINDOWS2\system32\winlogon.exe (512)";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"C:\WINDOWS2\system32\svchost.exe (904)";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"C:\WINDOWS2\system32\services.exe (560)";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"C:\WINDOWS2\system32\lsass.exe (572)";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"\\?\globalroot\systemroot\system32\geyekrggrhtqfv.dll";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"\\?\globalroot\systemroot\system32\geyekrggrhtqfv.dll";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"\\?\globalroot\systemroot\system32\geyekrggrhtqfv.dll";"Trojan horse BackDoor.Generic11.ZNE";"Infected"
"\\?\globalroot\systemroot\system32\geyekrggrhtqfv.dll";"Trojan horse BackDoor.Generic11.ZNE";"Infected"

and will just keep repeating those same files, none of these scaners can move them to the "chest" or qurantine as it allways states it is full, even after i empty them.
im at my wits end on what to do, if anyone has an idea to fix this please let me know

themadbomber

oh i forgot to mention, when playing games i get two diffrent dialog boxs, one states agent.exe was closed (pop up windows box) and the other is wimprive.exe

also when useing search engines if i click on the link i get redirected or the page fails to load, i have to copy the address and paste it into a new window to get to where i want to go

TheBruce1

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.