"warning: Spyware detected…" 'ahtn.html' is now my background

[JustBiteMe2k]

I was recently the victim of a virus/spyware/trojan (probably all 3!) programme which did a number of obvious things:

1. Changed my background to a black screen with "warning: Spyware detected…" 'ahtn.html' is now my background.
2. Caused me to receive warning messages every few minutes, pretending to have run a scan on the computer (little red "X" next to the clock)
3. Took me to an internet page to download some virus fixing software (don't worry I didn't do anything [else] stupid like downloading it).
4. Disabled Task Manager
5. Keeps disabling resident scan on Avast
6. Probably much more...

Since the malicious software installed itself I have disabled my network card; rebooted the machine to 'safe mode without networking' and performed a quick and (now doing) thorough scan of all hard drives using Avast (should be up to date since it's always telling me it's done a database update). Although it claims to have found a series of Trojans I am not convinced it's on top of things and haven't ventured back into 'Normal Windows' or onto the www yet.

I have downloaded to a USB stick (on second PC, laptop) the following which I could run this evening when I return home from work...
dds.scr (from sticky link on this forum)
Malwarebytes Anti-Malware
Spybot Search & Destroy
Ad-Aware
and ComboFix (already read: Hijack This Help so not going to run it (if at all) until instructed to)

I used the qualified "could run" on the basis that someone here might tell me that's a silly thing to do. I am in the gathering of information stage so I am prepared this evening to clean the system.

So; what's the first step I should perform knowing the above when I arrive home?

Also; I have a number of hard drives installed into this system... the avast scan is taking an age since it goes through them all... am I best going inside the box and disconnecting them before starting this? I suppose the query is if the malicious software moves between drives or just stays on my main C-drive.


Thank you in advance for your advice; I've read a number of posts from this board and everybody seems very helpful... I'm hoping to tap into this helpful knowledge and fix my PC (then kill my son for infecting! )

[amateur]

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.