Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: glenn moss on October 19, 2005, 03:24:40 AM

Title: not new but differant file
Post by: glenn moss on October 19, 2005, 03:24:40 AM

My daughter in law has pc infected with win32 Trojano 2502.
Only differance is it's in win repair file any help with this? OR is it the same-O,same-O??

Title: Re: not new but differant file
Post by: galooma on October 19, 2005, 03:39:04 AM

hi and welcome glenn

if by repair you actually mean "restore" file then it can simply be removed by de-activating system restore (which dumps your restore files) then re-activating system restore. :)

Title: Re: not new but differant file
Post by: glenn moss on October 19, 2005, 05:19:06 AM

As far as I know, its "win repair vaip". I have run thru a few things with her already,turning off sys restore,setting up bootscan with Avast and restarting in safemode...!
Pretty much what everyone else has gone thru.

Title: Re: not new but differant file
Post by: galooma on October 19, 2005, 05:35:32 AM

maybe you could get the full path to the "win repair vaip" file thats infected and submit it to an online scan somewhere(see REJZOR`s security site)

Title: Re: not new but differant file
Post by: glenn moss on October 19, 2005, 05:42:58 AM

Yes ,I'm going over there tommorrow and see what I can do.
She is really frustrated as I can imaging. I do want to try A few more things before we threw in the towel!

Title: Re: not new but differant file
Post by: Spiritsongs on October 19, 2005, 08:51:15 AM

 :) Perhaps you should try the good & FREE "Ewido"
    available at www.ewido.net/en !? This program
    "specializes" in detecting & removing trojans, worms,
     dialers, etc .

Title: Re: not new but differant file
Post by: glenn moss on October 19, 2005, 03:17:41 PM

Thanx
 I will try that and let you know!

Title: Re: not new but differant file
Post by: DavidR on October 19, 2005, 03:26:23 PM

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/xhtml/index_en.html)

Title: Re: not new but differant file
Post by: glenn moss on October 20, 2005, 03:31:48 PM

Thank you for your help! Its seems to be fixed,between Avast and Ewido it has done the trick................so far.
 FYI it was the "win\repair\vgaip" file not vaip. I ran disk cleanup on her pc and they had over 88,000 temp files on it.
Talk about not cleaning house!!! Again thank you to the AVAST team for all your help.