Here's what happened:
- I was dropping on Entrecard.
- After a drop my computer locked up & Windows media launched. At this point I didn't suspect anything, I just didn't want to watch anything on windows media, so I attempted to close it down.
- After dealing with Windows media, I left the room
- Came back after 45 mins or so, and saw the the following messages & displays:
- Also I noted behind the Resident Shield Display (Resident Shield is part of my AVG anti-virus software) was another display, with a name something like Anti-Virus Pro (I think), and a list of stuff detected.
- There was a balloon a the bottom task bar saying that my computer was infected, and I needed to run a scan - this was from the Anti-Virus Pro (or whatever - for the life of me I can't remember the name and I didn't write it down).
- When I clicked on the AVG Icon, nothing happened
What I did:
- Shut down the computer. I did this by pressing and holding in the power off button.
- Booted up computer in Safe Mode
- Ran a full "Command Line" AVG Scan.
- The scan came back clean (which I did not see as a good thing); also there were a lot of system files and such that were "locked" and weren't tested. None of this gave me confidence.
- Did a system restore to a previous date, several days ago. It's possible (nay, even probable) that I should have done the sytem restore before the scan. Anyway.
- Restarted computer in normal mode
- AVG Kicked off a scan automatically. That was a good thing - normally these trojans more or less disable the anti-virus software.
- AVG finished, detecting some tracking cookies, but no Trojans
- Updated & Ran MalwareBytes - full scan
- MalwareBytes detected "Trojan.Agent", located at C:\Documents and Settings\owner\local settings\temp\pdfupd.exe (I hate pdf's!!!)
- Quarantined and deleted file
- Restarted computer
So, to sum up: I shut down the computer, did a system restore, ran scans & things seem stable.