Have this nasty Trojan (TR/Crypt.ZPACK.Gen Trojan according to Avira AntiVir) on my friends computer. Cannot remove it. Got so far to remove it from the start up registry, which allowed to change background again. I also tried to remove it with Malwarebytes Anti-Malware. Removed them (and this program doesn't find any malware anymore) but when I run Avira it still finds it.
I ran reports with ATF-Cleaner and OTListlt2 and SecurityCheck as posted by the forum rules. The problem though is that I cannot access the internet with the computer anymore after the Trojan hit and it doesn't allow me to get them through an external hard drive / flash drive / even burn a cd, since it doesn't acknowledge to drag files from the computer to the external. Any thoughts? Or do you really need the 3 text files created by the actions to decide what's happening?
Thanks for your help and ideas!