Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: lindamnovak on February 27, 2005, 07:15:37 PM

Title: Win32:Adan-001
Post by: lindamnovak on February 27, 2005, 07:15:37 PM
 :-[ Avast cannot access  the file  adstatkeep.exe    to remove, what do i do?
Title: Re: Win32:Adan-001
Post by: DavidR on February 27, 2005, 09:05:25 PM
- What OS are you using? is it up to date?
- What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
- Where was it found example (C:\windows\system32\infected-filename.xxx)?
Title: Re: Win32:Adan-001
Post by: lindamnovak on February 28, 2005, 08:54:03 PM
The file name:  c:\program files\adstatus service\adstatkeep.exe

Malware name:  Win32:Adan-001[Adw]

VPS version:  0508-4, 02/27/2005

I get the message:  Access is denied
Cannot process "c:\program files\adstatus service\adstatleep.exe"
everytime I open up avast i get the warning that memory is infected. 

Prior to getting this message i had run an update of avast and had run  a complete virus check, including  all files.  Now i can't "move to chest" the affected file.

I tried to delete file at the next system start, to no avail.

I am using avast v.4.6 home edition

What can I do??

My VPS file version is: 0508-4,  compilation date:  02/27/2005
Title: Re: Win32:Adan-001
Post by: Lisandro on February 28, 2005, 08:59:44 PM
Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Access denied means, generally, that the file is in use by another process (program) and cannot be repaired/cleaned/moved/handled by avast!
Title: Re: Win32:Adan-001
Post by: lindamnovak on February 28, 2005, 09:03:44 PM
I have windows 98

I will try the boot-time scan

Linda
Title: Re: Win32:Adan-001
Post by: DavidR on February 28, 2005, 09:15:40 PM
The reason I asked what OS, are you using is, if you have XP you can schedule a boot-time scan from within avast. Now you have let us know you have win98, boot-time scan is not available on win98.

A google search for adstatleep.exe indicates that this is likely to be spyware, if you haven't got this software, get it install it and run it (freeware).

1. Ad-Aware (http://www.lavasoft.de/support/download)
2. Spybot Search and Destroy (http://www.safer-networking.org/index.php?lang=en&page=download)
3. Spywareblaster (http://www.javacoolsoftware.com/spywareblaster.html)
4. Download HijackThis.zip (http://www.spywareinfo.com/~merijn/files/hijackthis.zip)
Title: Re: Win32:Adan-001
Post by: Lisandro on February 28, 2005, 09:29:49 PM
I have windows 98 - I will try the boot-time scan

You can´t as it's not a Windows 98 feature, only XP...  :-\
You can try to boot into safe mode (pressing F8 while booting) and trying to scan/remove the virus there.
Title: Re: Win32:Adan-001
Post by: lindamnovak on March 01, 2005, 01:45:14 AM
 :D
I ran avast from safe mode, did a through scan,
avast still would not move to chest,
but it did let me delete the file.

the file was:  C;\Windows\TEMP\_avast4_\unp251899839

will removing this file affect avast?  the screen appears in black and white now, but seems to be functioning

the infection was:  WIN32:Adan-001[Adw]

after deleteling I rebooted, i opened avast, and my computer is now clean   Is there anything else i need to do?

I do have ad-aware installed,  and i run it weekly

anyway, hopefully my computer is safe, again

thanks for your help!!!!!! 

Linda
Title: Re: Win32:Adan-001
Post by: Lisandro on March 01, 2005, 03:05:39 AM
The file was:  C;\Windows\TEMP\_avast4_\unp251899839
Will removing this file affect avast?

No. It's safe to be deleted, it's a temporary file.

After deleteling I rebooted, i opened avast, and my computer is now clean   Is there anything else i need to do?

Set your sensitivity to High (on the Standard Shield provider settings).  ;)
Keep your avast installation updated and run regular (weekly based) scannings  :)