Moved to Makware Discussion > Home User Assistance.
Unfortunately no antivirus will stop everything, you have to be so careful these days, keep Windows up to date and keep some extra tools around handy just in case, some are suggesated HERE.
Can you access the internet in Safe Mode with Networking, reached by tapping F8 repeatedly while booting up and then selecting #2 on the ensuing menu?
If so, download, install, update (important) and run the FREE version of THIS software. Note if you can't reach the internet in either mode then using a computer that works, download the installer to a USB flash drive and then you should be able to install it in that mode.
If that fails to work then try the flash drive approach and go the Hijackthis route as described in that forst link I gave.
You can certainly have McAfee take a look but they charge for professional virus removal. That is not cheap and it is HERE.
This has also been reported by users in a thread in the Help section (https://community.mcafee.com/message/197387#197387) - you might want to keep an eye on it for developments.
I suggested there that the file be uploaded to VirusTotal to be checked by an array of anti-virus scanners.
Hi, TY both Moderator's : for replying
I know I'll either need to do a system restore or new install. I'll try your suggestion with the THIS software. I've had my daughter put all of her pics on an external HD. Using the program Process Explorer and FileAlyzer, you are able to look into the trojan files. I found where all top brand Anti Virus are listed, inclusing McAfee, disabling them so the trojan can load. I'm taking computer programming and I wish I had time to decipher this so I could learn from it. I know you're correct, no anti virus can catch everything simple because of all of the variations. Sorry about posting in the wrong place. I've tried to investigate on my own as to how my daughter rec'd. this. I was able to pin point the day and time and it's when she was online. She said she was on Facebook, playing Farmville/Cityville, something like that when the internet shut down. I found out when I arrived home, tried to get online and found the proxy was changed. After unselecting the checked proxy, I was able to get online, but I immediately checked MSCONFIG and found con.host. Knowing this was foreign, I began to further investigate. I knew immediately when I saw "McAfee, etc" listed, it was bad news. I shall upload the con.host file to "Virus Total", but I think there could be another file associated with it. From what I gather, it all relates to csrss and dwn.exe.
Thank you for the helpful information
Hi again, this is really weird. I've put the trojan on the USB, moved the USB over to the uninfected desktop and low and behold, McAfee zapped it right away off of the USB?!? Go figure lol. I reloaded the trojan back onto the USB from the laptop, got back online with the laptop (only after disabling conhost.exe) and finally uploaded it to Virus Total.
I wanted to send it to McAfee but after my 1 hour attempt of trying to get it to Virus Total, I'm in the middle of a system restore.