My wife may have been phished using her yahoo email account. She made contact with a suspicious character from an ebay auction and ever since my computer has been acting up. Ebay forums say guy was a scammer and probably installed something on my computer (keystroke logger, etc) in order to gain personal info.

 

I was performing my AVG scan and when it was approx. 75% completed a message popped up from my Sana Security [anti-spyware/adware] program (sanasecurity.com) that said a threat called "BGNEWSUI.EXE" had been detected and quarantined. Then when my AVG scan had completed, I clicked on apply action and a warning message popped up that read: "The file C:\System Volume Information\_restore{C253B3E0-5474-45CB-9E63-8AF93CE499F6}\RP636A0085370.exe/WeUnistall.exe cannot be quarantined because it is embedded in the archive C:\System Volume Information\_restore{C253B3E0-5474-45CB-9E63-8AF93CE499F6}\RP636A0085370.exe. Do you want to quaratine the whole archive?" I clicked no because it looked to me like the entire C: drive would be quarantined. I hope that was the right choice.

 

After I clicked no on the warning message above the AVG scan said that all actions had been applied and that the BGNEWSUI.EXE had be quarantined.

 

My AVG Scan Report is:

 

 

---