Weird poup-ups on Windows appearing

[MaFerreira]

Hi!

I've been having the problem of some weird poup-ups apearing on my Windows when it is started. I think i got whatever it is that i have from a infected pen-drive.

My Windows is in POrtuguese and the messages, in english, says that I have an spyware and I should click on 'OK' in the message to download some kind of programs to take it off from my computer. I never did that.

And it appears as well a window that reads:

'Attention! System detected a potential hazar (trijanspm/lx) on your computer that may infect executable files. Your private information and PC safety is at risk. to get rid os unwante spyware and keep your computer safe you need update your current security software. Click OK to download official intrusion detection system (IDs software)'

I call it 'weird' because my Windows XP is in portuguese and i belive that any window that poups-up shoulb be in Portuguese as well, so these messages are, for me, viruses.

and today, the scrolling in the mouse pad isn't working.

Pleeease help me out?

I'm attaching the logs requested.

;**

[Aleksandra]

1. Please, disable System Restore and antivirus (if you have).
2. Execute the script in AVZ:

begin
ClearQuarantine;
SetAVZGuardStatus(True);
 DelBHO('{5C255C8A-E604-49b4-9D64-90988571CECB}');
 QuarantineFile('C:\WINDOWS\system32\winupdate.exe','');
 DeleteFile('C:\WINDOWS\system32\winupdate.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','winupdate.exe');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('TSW', 3, 3, true);
BC_Activate;
CreateQurantineArchive('C:\quarantine.zip');
RebootWindows(true);
end.

After restart upload file C:\quarantine.zip, by link http://virusinfo.info/upload_virus.php?tid=57370

3. Attach a new virusinfo_syscheck.zip.

[MaFerreira]

did what u asked for.

new log attached.

thanks for helping... the messages are gone. See if I have anything more.

;**

[Aleksandra]

winupdate.exe - Trojan.Fakealert.4983 (DrWEB)

I can see nothing harmful in your logs.

[MaFerreira]

Now, how do i clean the pen-drive where i got the virus from?

;**

[Aleksandra]

Connect your drive and repeat virusinfo_syscheck.zip. Startup from removable drives is disabled.

[MaFerreira]

I did the AVZ with the drive connected. Got the logs attached.

;**

[Aleksandra]

Execute the script in AVZ:

begin
 DeleteFile('E:\autorun.inf');
 DeleteFile('E:\ReCYClER\explorer.exe');
ExecuteSysClean;
RebootWindows(true);
end.

Attach a new virusinfo_syscheck.zip.

[MaFerreira]

did what u ask for.

the pen drive is safe now?

Thanks for helping x)

;**

[Aleksandra]

The log is clean.

the pen drive is safe now?

Yes, of course.