Not too much trouble at all. This may actually end up being one of the easier infections this week. I hope. Ha ha. Okay...first, it appears that VVSN is no longer adding itself to your startup, which is a very good sign. That doesn't mean it is gone, however, so go ahead and follow these steps:
Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your systemDelete these files/folders, as follows:
1. Go to
Start >
Run > type
Notepad.exe and click
OK to open Notepad.
It
must be Notepad, not Wordpad.
2. Copy the text in the below code box by highlighting all the text and pressing
Ctrl+CKillAll::
Folder::
c:\program files\VVSN
File::
c:\program files\VVSN\VVSN.exe
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"VVSN"=-
3. Go to the Notepad window and click
Edit >
Paste4. Then click
File >
Save5. Name the file
CFScript.txt - Save the file to your Desktop
6. Then drag the
CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below.
Important: Perform this instruction carefully!
ComboFix will begin to execute, just follow the prompts.
After reboot (in case it asks to reboot), it will produce a log for you.
Post that log (Combofix.txt) in your next reply, along with a new HijackThis log.Note:
Do not click ComboFix's window while it is running. That may cause your system to freezeThat will hopefully get rid of any trace of this infection. Now, as for those other anti-virus programs...as you guessed, they are most likely just leftovers. Thankfully, there is a very simple way to deal with this. Download these three programs:
Panda Security Uninstaller:
http://www.pandasecurity.com/resources/sop/UNINSTALLER_09.exeMcAfee Consumer Products Remover:
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exeNorton Removal Tool: ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe (will remove ALL Norton products, so save product your keys if you have other programs by them)
All you have to do is start each program. Once one has completed, move on to the next. This will likely require you to restart the computer several times. But it should remove all files and registry keys related to these programs. After you have done this, you can then delete the three removal tools.