Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Musicman on January 11, 2005, 09:58:18 PM

Title: Win32:kreper
Post by: Musicman on January 11, 2005, 09:58:18 PM

I through it away with recovering system I use windows XP
I have try everything but that was the only way.

Title: Re: Win32:kreper
Post by: DavidR on January 11, 2005, 10:07:49 PM

Hi, welcome to the forums.

Please Help us to Help you In order to help fully we need more information....
   - What OS are you using? is it up to date?
   - What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
   - What was the filename, where was it found example (C:\windows\system32\infected-filename.xxx)?
   - What actions have you taken to try and resolve the problem?

Have you tried scheduling a boot-time scan?

If something keeps coming back, it is because there is likely to be a registry entry that needs sorted. The best program to sort this is HiJackThis - Eddy's Website (http://members.home.nl/edeijl/) click the "HiJackThis Section" and also the "Malware removal instructions and applications" section.
and follow the directions there and get back to us if you need more help....

For an on-line scan of your Hijackthis log file try here http://hijackthis.de/index.php

Title: Re: Win32:kreper
Post by: Musicman on January 11, 2005, 11:16:13 PM

Ok
Windows XP pro last update
Avast/Home Vps: Already up to date
  (current version 0502-2)

Server: download10.avast.com (207.44.182.35)

Place: kan only see the copy
C:\Documents and Settings\Tommy\Lokala inställningar\Temporary Internet Files
and content.IE5\epci2915\main.exe

Avast warning in startup : name: win32:kreper-l (Trj)

Title: Re: Win32:kreper
Post by: DavidR on January 11, 2005, 11:37:10 PM

Delete your temporary internet files.

It would appear that avast caught this before it could get established, but you should schedule a boot-time scan from within avast and then run hijackthis, use Eddy's HJT analyser or the link i gave you for an on-line analysis for hijackthis.

Title: Re: Win32:kreper
Post by: Musicman on January 12, 2005, 12:35:27 AM

I use track eraser pro it clean everything
I use avast scan att startup.
I use adaware6se pro and pestpatrol
But when I use systemrecovery in WinXP it's gone
I got back one 7day's

Title: Re: Win32:kreper
Post by: Gillie2tat on January 12, 2005, 10:09:11 AM

Just to be sure you're safe, I would disable System Restore, boot into Safe Mode and scan there with Avast.  Sometimes these things can get into your System Restore files...